{
"vendor": "Expel",
"slug": "expel",
"platform": "statuspage",
"status_url": "https://status.expel.io",
"last_checked": "2026-09-16T12:28:20Z",
"last_state": "ok",
"history_backfilled": true,
"first_watched": "2026-09-04T07:06:16Z",
"incidents": [
{
"body": "This issue is resolved. Email delivery from Workbench has been restored, and phishing email submissions are processing normally.\n\nSuspected phishing emails submitted during this time were not received by Expel and could not be processed. Please ask your users to resubmit anything they reported during this period.\n\nNotification emails generated during this time have been delivered. Some may arrive later than the timestamp they were originally generated.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-30T15:53:53.528-04:00",
"resolved_inferred": false,
"started_at": "2026-08-30T05:43:18.895-04:00",
"state": "resolved",
"title": "Emails from Workbench delayed since 12am UTC",
"updated_at": "2026-08-30T15:53:53.546-04:00",
"url": "https://stspg.io/sbdqwtcdx3cw"
},
{
"body": "The incident has been resolved, and all systems are once again fully available. No customer data was lost; SOC operations were impacted, but are back to normal.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-07-16T23:01:38.554-04:00",
"resolved_inferred": false,
"started_at": "2026-07-16T22:21:09.652-04:00",
"state": "resolved",
"title": "Workbench Availability due to Database Issue",
"updated_at": "2026-07-16T23:01:38.573-04:00",
"url": "https://stspg.io/skw2cn02xsw1"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "none",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-12T13:47:51.794-04:00",
"resolved_inferred": false,
"started_at": "2026-07-13T16:20:51.365-04:00",
"state": "resolved",
"title": "Issue affecting some vendor alerts",
"updated_at": "2026-08-12T13:47:51.812-04:00",
"url": "https://stspg.io/kkr9cq2bc51t"
},
{
"body": "All delayed messages have been delivered and the notifications system is fully operational.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-06-18T19:28:49.271-04:00",
"resolved_inferred": false,
"started_at": "2026-06-18T16:37:33.100-04:00",
"state": "resolved",
"title": "Delayed Notifications",
"updated_at": "2026-06-18T19:28:49.291-04:00",
"url": "https://stspg.io/tqwz8z1sts1r"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-06-18T09:29:31.307-04:00",
"resolved_inferred": false,
"started_at": "2026-06-17T19:11:36.837-04:00",
"state": "resolved",
"title": "Delays in processing phishing submissions",
"updated_at": "2026-06-18T09:29:31.322-04:00",
"url": "https://stspg.io/sgyynjv2cv1q"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-06-17T12:59:07.802-04:00",
"resolved_inferred": false,
"started_at": "2026-06-17T12:16:44.534-04:00",
"state": "resolved",
"title": "Alert Ingestion Delay for AWS Cloudtrail",
"updated_at": "2026-06-17T12:59:07.820-04:00",
"url": "https://stspg.io/trmx1n1mkjhg"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "none",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-06-09T13:33:31.416-04:00",
"resolved_inferred": false,
"started_at": "2026-06-09T11:40:12.452-04:00",
"state": "resolved",
"title": "Workbench Availability",
"updated_at": "2026-06-09T13:33:31.437-04:00",
"url": "https://stspg.io/zs8bshh3j0hs"
},
{
"body": "The incident has been resolved, and all alerts counts are once again accurate.  No customer data was lost, and SOC operations were not impacted.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "none",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-05-13T12:46:16.152-04:00",
"resolved_inferred": false,
"started_at": "2026-05-13T12:23:44.253-04:00",
"state": "resolved",
"title": "Workbench Expel Alert Count Discrepancy",
"updated_at": "2026-05-13T12:46:16.166-04:00",
"url": "https://stspg.io/92zrj8y6vtw3"
},
{
"body": "The incident has been resolved, and all systems are once again fully available.  No customer data was lost, and all previously-accessible security devices are once again accessible and ingesting alerts.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-05-01T16:01:01.193-04:00",
"resolved_inferred": false,
"started_at": "2026-05-01T14:50:52.417-04:00",
"state": "resolved",
"title": "Security Device Credentials Availability",
"updated_at": "2026-05-01T16:01:01.207-04:00",
"url": "https://stspg.io/x49rbq34y3gw"
},
{
"body": "This issue has been resolved. All notifications in the backlog have been delivered and new notifications are being delivered as normal.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-04-25T14:09:58.208-04:00",
"resolved_inferred": false,
"started_at": "2026-04-25T13:42:40.064-04:00",
"state": "resolved",
"title": "Delayed Notifications",
"updated_at": "2026-04-25T14:09:58.226-04:00",
"url": "https://stspg.io/3xy6z2skljc4"
},
{
"body": "We restored the credentials for the subset of devices, and are seeing that the majority of devices have returned to a healthy state. We investigated the remaining unhealthy devices, which are not related to the customer secrets vault upgrade. This incident is resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-04-20T16:54:07.773-04:00",
"resolved_inferred": false,
"started_at": "2026-04-20T12:20:52.323-04:00",
"state": "resolved",
"title": "Alert ingestion delayed for a subset of security devices",
"updated_at": "2026-04-20T16:54:07.789-04:00",
"url": "https://stspg.io/42nsjslt68j0"
},
{
"body": "Resolved: Microsoft has confirmed that the issues affecting Teams bots and message delivery are now fully resolved. All delayed messages have been reprocessed and delivered. Service is operating normally.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-03-24T17:12:56.102-04:00",
"resolved_inferred": false,
"started_at": "2026-03-24T12:58:42.908-04:00",
"state": "resolved",
"title": "Workbench Unable To Deliver Microsoft Teams Notifications",
"updated_at": "2026-03-24T17:12:56.117-04:00",
"url": "https://stspg.io/b071ck7j2gn1"
},
{
"body": "Workaround is in place, we are bypassing the faulty AWS region and all impacted devices have resumed ingestion.\n\nOnce the outage in the faulty region is over, we will resume ingestion in that region.\n\nAlert Ingestion issue resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-03-02T15:36:02.232-05:00",
"resolved_inferred": false,
"started_at": "2026-03-02T13:35:43.480-05:00",
"state": "resolved",
"title": "Alert Ingestion Outage for AWS GuardDuty",
"updated_at": "2026-03-02T15:36:02.248-05:00",
"url": "https://stspg.io/2n3h7bfqq347"
},
{
"body": "The incident has been resolved, and all delayed notifications have been delivered.  No customer data was lost, and SOC operations were not impacted.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-02-02T17:33:01.304-05:00",
"resolved_inferred": false,
"started_at": "2026-02-02T16:00:50.442-05:00",
"state": "resolved",
"title": "Workbench Outbound Notifications Delay",
"updated_at": "2026-02-02T17:33:01.323-05:00",
"url": "https://stspg.io/mnp12twkqks1"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-01-20T18:02:02.636-05:00",
"resolved_inferred": false,
"started_at": "2026-01-20T15:31:38.847-05:00",
"state": "resolved",
"title": "Alert Ingestion Delay",
"updated_at": "2026-01-20T18:02:02.656-05:00",
"url": "https://stspg.io/4wx05tcyhq0z"
},
{
"body": "The hotfix for phishing submission outcome emails was successful and behavior has returned to normal. This incident is resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-01-07T17:54:02.873-05:00",
"resolved_inferred": false,
"started_at": "2026-01-07T14:51:06.204-05:00",
"state": "resolved",
"title": "Phishing Service Sending Multiple Notifications",
"updated_at": "2026-01-07T17:54:02.887-05:00",
"url": "https://stspg.io/c0lf61m6f5j2"
},
{
"body": "Detection pipelines are caught up. Service is nominal.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-12-29T17:09:01.373-05:00",
"resolved_inferred": false,
"started_at": "2025-12-29T16:26:28.060-05:00",
"state": "resolved",
"title": "Detection pipeline availability",
"updated_at": "2025-12-29T17:09:01.393-05:00",
"url": "https://stspg.io/m7hp468xjckk"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-11-19T13:17:21.443-05:00",
"resolved_inferred": false,
"started_at": "2025-11-18T10:34:16.150-05:00",
"state": "resolved",
"title": "Delivery failure for Teams messages",
"updated_at": "2025-11-19T13:17:21.459-05:00",
"url": "https://stspg.io/phwygrnxd54f"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-04-17T09:52:08.999-04:00",
"resolved_inferred": false,
"started_at": "2025-11-12T10:28:40.892-05:00",
"state": "resolved",
"title": "Service Update: Orca Security Integration",
"updated_at": "2026-04-17T09:52:09.014-04:00",
"url": "https://stspg.io/y40pt5y4m17x"
},
{
"body": "Analysts are able to successfully SSO into the Wiz console.  Incident is closed.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-11-03T14:43:47.433-05:00",
"resolved_inferred": false,
"started_at": "2025-11-03T11:56:31.825-05:00",
"state": "resolved",
"title": "Wiz Console Login Issues",
"updated_at": "2025-11-03T14:43:47.449-05:00",
"url": "https://stspg.io/xtkr94hpgh8q"
},
{
"body": "Microsoft has confirmed that the O365 outage has been completely resolved.\nOur integration with O365 remains healthy and no customer data was lost.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-10-29T22:22:45.000-04:00",
"resolved_inferred": false,
"started_at": "2025-10-29T13:17:19.978-04:00",
"state": "resolved",
"title": "Alert Ingest Delay for O365",
"updated_at": "2025-10-29T22:23:11.450-04:00",
"url": "https://stspg.io/0lbgttyy9dv4"
},
{
"body": "The third-party vendor responsible for the issues has provided a workaround which we have implemented in our infrastructure.  The incident has been resolved, and all systems are once again fully available.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-10-21T00:59:43.782-04:00",
"resolved_inferred": false,
"started_at": "2025-10-20T15:41:40.721-04:00",
"state": "resolved",
"title": "Workbench Availability",
"updated_at": "2025-10-21T00:59:43.801-04:00",
"url": "https://stspg.io/vvxrk29j8lq5"
},
{
"body": "The incident has been resolved, and all systems are once again fully available.  No customer data was lost.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "none",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-10-20T08:35:26.153-04:00",
"resolved_inferred": false,
"started_at": "2025-10-20T06:06:39.459-04:00",
"state": "resolved",
"title": "Amazon Web Services outage affecting Expel Workbench",
"updated_at": "2025-10-20T08:35:26.168-04:00",
"url": "https://stspg.io/bgf7gv79lln5"
},
{
"body": "The incident has been resolved, and all systems are once again fully available. All Microsoft Teams messages from Workbench that failed during the incident have been successfully delivered.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-10-17T02:59:30.132-04:00",
"resolved_inferred": false,
"started_at": "2025-10-17T01:55:38.968-04:00",
"state": "resolved",
"title": "Failures sending messages to Microsoft Teams channels",
"updated_at": "2025-10-17T02:59:30.152-04:00",
"url": "https://stspg.io/7xxznvs8pxt9"
},
{
"body": "The incident has been resolved and the Alert Analysis Dashboard is once again fully available. No customer data was lost, and SOC operations were not impacted.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-10-09T10:25:14.289-04:00",
"resolved_inferred": false,
"started_at": "2025-10-09T09:56:47.784-04:00",
"state": "resolved",
"title": "The Alert Analysis Dashboard is not displaying data",
"updated_at": "2025-10-09T10:25:14.305-04:00",
"url": "https://stspg.io/j0nxl7k1gh6m"
},
{
"body": "We have confirmed that the incident has been resolved. Email, slack and MS Teams notifications from Workbench are being delivered within normal timeframes.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-10-08T06:50:48.392-04:00",
"resolved_inferred": false,
"started_at": "2025-10-08T04:59:51.000-04:00",
"state": "resolved",
"title": "Delay in sending email, slack and MS Teams notifications from Workbench",
"updated_at": "2025-10-08T06:50:48.408-04:00",
"url": "https://stspg.io/hsfhvkbp9l3b"
},
{
"body": "Wiz have confirmed that they have resolved the issue and our SOC Analysts are now able to triage and investigate Wiz alerts.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "none",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-09-09T09:34:11.247-04:00",
"resolved_inferred": false,
"started_at": "2025-09-09T09:17:32.608-04:00",
"state": "resolved",
"title": "Console Login Issues - Impacting certain SSO and Wiz Accounts",
"updated_at": "2025-09-09T09:34:11.266-04:00",
"url": "https://stspg.io/n9n3fmn5x53n"
},
{
"body": "The outage affecting the Azure Security Center API has been resolved, and all services are now fully operational. Our security alerts and recommendations are flowing as expected, and our integration with Azure is now reporting as healthy. No customer data was lost.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2025-08-20T02:11:53.835-04:00",
"resolved_inferred": false,
"started_at": "2025-08-19T21:24:53.849-04:00",
"state": "resolved",
"title": "Alert Ingestion for Azure",
"updated_at": "2025-08-20T02:11:53.855-04:00",
"url": "https://stspg.io/v80q40fsjqwh"
}
]
}