[{"id":"SQNFPRuC4Pyqcq5MCAhn","number":"89146988681194980","begin":"2026-08-19T22:33:00+00:00","created":"2026-08-20T00:44:41+00:00","end":"2026-08-20T01:30:00+00:00","modified":"2026-08-20T01:53:07+00:00","external_desc":"We are investigating a potential issue with Google SecOps in the US region.","updates":[{"created":"2026-08-20T01:53:07+00:00","modified":"2026-08-20T01:53:07+00:00","when":"2026-08-20T01:53:07+00:00","text":"**Title**\nGoogle SecOps customers may have experienced elevated latencies in SecOps Dashboards \u0026 Reports in the US region.\n**Description**\nThe issue Google SecOps has been mitigated for all regions as of Wednesday, 2026-08-19 18:33 PDT.\nThe issue was a temporary surge in data processing.\nWe thank you for your patience while we resolved the issue.\n**Symptoms**\nImpacted customers may have experienced elevated latencies in SecOps Dashboards \u0026 Reports. Dashboards for UDM Events were not impacted.\n**Workaround**\nNone, as the issue is resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-20T00:44:41+00:00","modified":"2026-08-20T01:53:07+00:00","when":"2026-08-20T00:44:41+00:00","text":"**Title**\nWe are investigating a potential issue with Google SecOps in the US region.\n**Description**\nWe are experiencing an issue with elevated latencies on “Dashboards \u0026 Reports” in Google SecOps beginning on Wednesday, 2026-08-19 15:33 PDT.\nDashboards for UDM Events are not impacted.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2026-08-19 19:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers are experiencing elevated latencies on “Dashboards \u0026 Reports” in Google SecOps.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-08-20T01:53:07+00:00","modified":"2026-08-20T01:53:07+00:00","when":"2026-08-20T01:53:07+00:00","text":"**Title**\nGoogle SecOps customers may have experienced elevated latencies in SecOps Dashboards \u0026 Reports in the US region.\n**Description**\nThe issue Google SecOps has been mitigated for all regions as of Wednesday, 2026-08-19 18:33 PDT.\nThe issue was a temporary surge in data processing.\nWe thank you for your patience while we resolved the issue.\n**Symptoms**\nImpacted customers may have experienced elevated latencies in SecOps Dashboards \u0026 Reports. Dashboards for UDM Events were not impacted.\n**Workaround**\nNone, as the issue is resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/SQNFPRuC4Pyqcq5MCAhn","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"DeyV4JALYKyuCA6jPTPc","number":"9775056714248814734","begin":"2026-08-15T20:40:00+00:00","created":"2026-08-15T21:38:54+00:00","end":"2026-08-16T01:00:00+00:00","modified":"2026-08-16T01:09:55+00:00","external_desc":"Google SecOps customers in the me-west1 region may have seen elevated latencies, and errors in Search queries, Dashboards and Rule execution.","updates":[{"created":"2026-08-16T01:09:16+00:00","modified":"2026-08-16T01:09:55+00:00","when":"2026-08-16T01:09:16+00:00","text":"**Summary**\n[MITIGATED] Google SecOps customers in the me-west1 region may have seen elevated latencies, and errors in Search queries, Dashboards and Rule execution.\n**Description**\nThe issue affecting increased Search query latency and error rates for Google SecOps in me-west1 has been mitigated as of Sunday, 2026-08-16 18:00 PDT.\nOur engineers mitigated the issue by load shedding SecOps Curated Rules. Custom rules are not impacted. We will backfill all impacted curated rules through the remainder of the week.\nWe thank you for your patience while we worked to mitigate the issue.\n**Diagnosis / Customer Symptoms**\nImpacted customers in the me-west1 region may have seen elevated latencies in Search queries and Dashboard visualization, and errors in Rule execution.\n**Workaround**\nThis issue is mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-15T22:50:37+00:00","modified":"2026-08-16T01:09:16+00:00","when":"2026-08-15T22:50:37+00:00","text":"**Summary**\nGoogle SecOps customers in the me-west1 region may see elevated latencies, and errors in Search queries, Dashboards and Rule execution.\n**Description**\nWe are experiencing an issue with Google SecOps, beginning on Saturday, 2026-08-15 13:40 PDT.\nOur engineering team is in the process of mitigating the issue.\nWe will provide an update by Saturday, 2026-08-15 18:30 PDT with details.\n**Diagnosis / Customer Symptoms**\nImpacted customers in the me-west1 region may see elevated latencies in Search queries and Dashboard visualization, and errors in Rule execution.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tel Aviv (me-west1)","id":"me-west1"}]},{"created":"2026-08-15T21:38:54+00:00","modified":"2026-08-15T22:50:37+00:00","when":"2026-08-15T21:38:54+00:00","text":"**Summary**\nGoogle SecOps customers may see elevated latencies, and errors in Search queries, Dashboards and Rule execution.\n**Description**\nWe are experiencing an issue with Google SecOps, beginning on Saturday, 2026-08-15 13:40 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Saturday, 2026-08-15 16:00 PDT with details.\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms**\nImpacted customers may see elevated latencies in Search queries and Dashboard visualization, and errors in Rule execution.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tel Aviv (me-west1)","id":"me-west1"}]}],"most_recent_update":{"created":"2026-08-16T01:09:16+00:00","modified":"2026-08-16T01:09:55+00:00","when":"2026-08-16T01:09:16+00:00","text":"**Summary**\n[MITIGATED] Google SecOps customers in the me-west1 region may have seen elevated latencies, and errors in Search queries, Dashboards and Rule execution.\n**Description**\nThe issue affecting increased Search query latency and error rates for Google SecOps in me-west1 has been mitigated as of Sunday, 2026-08-16 18:00 PDT.\nOur engineers mitigated the issue by load shedding SecOps Curated Rules. Custom rules are not impacted. We will backfill all impacted curated rules through the remainder of the week.\nWe thank you for your patience while we worked to mitigate the issue.\n**Diagnosis / Customer Symptoms**\nImpacted customers in the me-west1 region may have seen elevated latencies in Search queries and Dashboard visualization, and errors in Rule execution.\n**Workaround**\nThis issue is mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/DeyV4JALYKyuCA6jPTPc","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tel Aviv (me-west1)","id":"me-west1"}]},{"id":"hMyWdcsbGsdQ6b3WqAUP","number":"14975225332534111231","begin":"2026-08-14T12:04:00+00:00","created":"2026-08-14T13:37:54+00:00","end":"2026-08-14T14:25:00+00:00","modified":"2026-08-14T14:45:49+00:00","external_desc":"Google SecOps customers are experiencing ingestion failure with the 3P Proofpoint API in all regions.","updates":[{"created":"2026-08-14T14:45:43+00:00","modified":"2026-08-14T14:45:49+00:00","when":"2026-08-14T14:45:43+00:00","text":"**Description:**\nWe were experiencing an issue with Google SecOps beginning on Friday, 2026-08-14 05:04 PDT.\nThis has been confirmed due to an upstream (3rd party) Proofpoint Service outage. https://proofpoint.my.site.com/community/s/proofpoint-current-incidents\nThe issue has been mitigated as of Friday, 2026-08-14 7:25 PDT once the upstream service has recovered. Google SecOps will backfill any missing data for the impacted duration.\nWe apologize to all who were affected by the disruption.\n**Symptoms:**\nGoogle SecOps customers were experiencing ingestion failure with the 3P Proofpoint API in all regions.\n**Workaround:**\nNone as the issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-14T14:15:34+00:00","modified":"2026-08-14T14:45:43+00:00","when":"2026-08-14T14:15:34+00:00","text":"**Description:**\nWe are experiencing an issue with Google SecOps beginning on Friday, 2026-08-14 05:04 PDT.\nThis has been confirmed due to an upstream (3rd party) Proofpoint Service outage. https://proofpoint.my.site.com/community/s/proofpoint-current-incidents\nOur engineering team continues to monitor the issue.\nWe will provide an update by Friday, 2026-08-14 08:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nGoogle SecOps customers across all regions will experience failure in data ingestion through Proofpoint API.\n**Workaround:**\nThere is a temporary workaround available at official Proofpoint Incident communication\nhttps://proofpoint.my.site.com/community/s/proofpoint-current-incidents.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-08-14T14:02:30+00:00","modified":"2026-08-14T14:15:34+00:00","when":"2026-08-14T14:02:30+00:00","text":"**Description:**\nWe are experiencing an issue with Google SecOps beginning on Friday, 2026-08-14 05:04 PDT.\nThis has been confirmed due to an upstream (3rd party) Proofpoint Service outage. https://proofpoint.my.site.com/community/s/proofpoint-current-incidents\nOur engineering team continues to monitor the issue.\nWe will provide an update by Friday, 2026-08-14 08:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nGoogle SecOps customers across all regions will experience failure in data ingestion through Proofpoint API.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-08-14T13:37:54+00:00","modified":"2026-08-14T14:02:30+00:00","when":"2026-08-14T13:37:54+00:00","text":"**Description:**\nWe are experiencing an issue with Google SecOps beginning on Friday, 2026-08-14 05:04 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Friday, 2026-08-14 07:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nGoogle SecOps customers across all regions will experience failure in data ingestion through Proofpoint API.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-08-14T14:45:43+00:00","modified":"2026-08-14T14:45:49+00:00","when":"2026-08-14T14:45:43+00:00","text":"**Description:**\nWe were experiencing an issue with Google SecOps beginning on Friday, 2026-08-14 05:04 PDT.\nThis has been confirmed due to an upstream (3rd party) Proofpoint Service outage. https://proofpoint.my.site.com/community/s/proofpoint-current-incidents\nThe issue has been mitigated as of Friday, 2026-08-14 7:25 PDT once the upstream service has recovered. Google SecOps will backfill any missing data for the impacted duration.\nWe apologize to all who were affected by the disruption.\n**Symptoms:**\nGoogle SecOps customers were experiencing ingestion failure with the 3P Proofpoint API in all regions.\n**Workaround:**\nNone as the issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/hMyWdcsbGsdQ6b3WqAUP","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"id":"ci2mA94CoSKGde7L4Rsk","number":"14611560951627840104","begin":"2026-08-12T15:30:00+00:00","created":"2026-08-12T19:37:38+00:00","end":"2026-08-12T23:30:00+00:00","modified":"2026-08-13T00:11:54+00:00","external_desc":"[Investigating] Some Google SecOps customers in the US multi-region may experience high Search latency and delayed detections.","updates":[{"created":"2026-08-13T00:11:51+00:00","modified":"2026-08-13T00:11:54+00:00","when":"2026-08-13T00:11:51+00:00","text":"**Summary**\n[Mitigated] Some Google SecOps customers in the US multi-region may have experienced high Search latency and delayed detections.\n**Description:**\nThe issue with Google SecOps has been mitigated for all affected projects as of Wednesday, 2026-08-12 16:30 PDT.\nFrom preliminary analysis, transient network latency temporarily impacted platform search performance.\nOur engineers mitigated the issue by rerouting traffic around the impacted networking infrastructure. We continue to monitor system telemetry to ensure continued stability.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nAffected customers may have experienced high Search latency, potentially dropped queries, elevated Dashboards latency, and delayed detections.\n**Workaround:**\nNo workarounds as the issue is mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-12T20:56:23+00:00","modified":"2026-08-13T00:11:51+00:00","when":"2026-08-12T20:56:23+00:00","text":"**Description:**\nWe are experiencing an issue with Google Secops Search and detections in the US multi-region beginning on Wednesday, 2026-08-12 8:30 PDT.\nOur engineers are actively investigating the root cause to isolate and mitigate the issue.\nWe will provide more information by Wednesday, 2026-08-12 18:00 PDT with details.\n**Symptoms:**\nAffected customers may experience high Search latency, potentially dropped queries, elevated Dashboards latency, and delayed detections.\n**Workaround:**\nNo workarounds available at this time.","status":"SERVICE_INFORMATION","affected_locations":[]},{"created":"2026-08-12T20:23:14+00:00","modified":"2026-08-12T20:56:23+00:00","when":"2026-08-12T20:23:14+00:00","text":"**Description:**\nWe are experiencing an issue with Google Secops Search and detections in the US multi-region beginning on Wednesday, 2026-08-12 8:30 PDT.\nOur engineers are actively investigating the root cause to isolate and mitigate the issue.\nWe will provide more information by Wednesday, 2026-08-12 14:30 PDT with details.\n**Symptoms:**\nAffected customers may experience high Search latency, potentially dropped queries, elevated Dashboards latency, and delayed detections.\n**Workaround:**\nNo workarounds available at this time.","status":"SERVICE_INFORMATION","affected_locations":[]},{"created":"2026-08-12T19:48:47+00:00","modified":"2026-08-12T20:23:14+00:00","when":"2026-08-12T19:48:47+00:00","text":"**Description:**\nWe are experiencing an issue with Google Secops Search and detections in the us multi-region beginning at Wednesday, 2026-08-12 8:30 PDT.\nOur engineers are actively investigating the root cause to isolate and mitigate the issue.\nWe will provide more information by Wednesday, 2026-08-12 13:30 PDT. US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nAffected customers may experience high Search latency, potentially dropped queries, elevated Dashboards latency, and delayed detections.\n**Workaround:**\nNo workarounds available at this time.","status":"SERVICE_INFORMATION","affected_locations":[]},{"created":"2026-08-12T19:37:38+00:00","modified":"2026-08-12T19:48:47+00:00","when":"2026-08-12T19:37:38+00:00","text":"We are investigating an issue with High Search Query Response Latencies in the US Region\nWe will provide more information by Wednesday, 2026-08-12 13:30 PDT.","status":"SERVICE_INFORMATION","affected_locations":[]}],"most_recent_update":{"created":"2026-08-13T00:11:51+00:00","modified":"2026-08-13T00:11:54+00:00","when":"2026-08-13T00:11:51+00:00","text":"**Summary**\n[Mitigated] Some Google SecOps customers in the US multi-region may have experienced high Search latency and delayed detections.\n**Description:**\nThe issue with Google SecOps has been mitigated for all affected projects as of Wednesday, 2026-08-12 16:30 PDT.\nFrom preliminary analysis, transient network latency temporarily impacted platform search performance.\nOur engineers mitigated the issue by rerouting traffic around the impacted networking infrastructure. We continue to monitor system telemetry to ensure continued stability.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nAffected customers may have experienced high Search latency, potentially dropped queries, elevated Dashboards latency, and delayed detections.\n**Workaround:**\nNo workarounds as the issue is mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/ci2mA94CoSKGde7L4Rsk","currently_affected_locations":[],"previously_affected_locations":[]},{"id":"CtZFZSVt6NrNBixapNUo","number":"14657488582838850915","begin":"2026-08-11T15:00:00+00:00","created":"2026-08-13T01:45:59+00:00","end":"2026-08-13T17:58:00+00:00","modified":"2026-08-13T18:20:41+00:00","external_desc":"Google SecOps customers in the US multi-region may have experienced delays in Legacy BigQuery Export Jobs.","updates":[{"created":"2026-08-13T18:20:41+00:00","modified":"2026-08-13T18:20:42+00:00","when":"2026-08-13T18:20:41+00:00","text":"**Summary**\nGoogle SecOps customers in the US multi-region may have experienced delays in Legacy BigQuery Export Jobs.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-08-13 10:58 PDT.\nWe thank you for your patience while we worked on resolving the issue.\nWe are targeting backfill completion by Tuesday, 2026-08-18 17:00 PDT.\n**Symptoms**\nSome Google SecOps customers in the US may have experienced low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-13T15:52:54+00:00","modified":"2026-08-13T18:20:41+00:00","when":"2026-08-13T15:52:54+00:00","text":"**Summary**\nGoogle SecOps customers in the US multi-region may experience delays in Legacy BigQuery Export Jobs..\n**Description**\nWe are experiencing an issue with Google SecOps Legacy BigQuery export jobs failing intermittently beginning on Thursday, 2026-08-06 08:00 PDT.\nOur engineering team is continuing to implement the mitigation and initiated the backfill in parallel. We are targeting mitigation competition by Thursday, 2026-08-13 12:00 PDT and backfill completion by Tuesday, 2026-08-18 04:00 PDT.\nReal time exports are no longer impacted.\nWe will provide an update by Thursday, 2026-08-13 12:00 PDT with details.\n**Symptoms**\nSome Google SecOps customers in the US may experience low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-13T12:13:05+00:00","modified":"2026-08-13T15:52:54+00:00","when":"2026-08-13T12:13:05+00:00","text":"**Summary**\nGoogle SecOps customers in the us multi-region may experience delays in Legacy BigQuery Export Jobs.\n**Description**\nWe are experiencing an issue with Google SecOps Legacy BigQuery export jobs failing intermittently beginning on Thursday, 2026-08-06 08:00 PDT.\nOur engineering team is continuing to implement the mitigation and initiated the backfill in parallel.\nWe will provide an update by Thursday, 2026-08-13 09:00 PDT with current details.\n**Symptoms**\nSome Google SecOps customers in the US may experience low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-13T07:47:36+00:00","modified":"2026-08-13T12:13:05+00:00","when":"2026-08-13T07:47:36+00:00","text":"**Summary**\nGoogle SecOps customers in the us multi-region may experience delays in Legacy BigQuery Export Jobs.\n**Description**\nWe are experiencing an issue with Google SecOps Legacy BigQuery export jobs failing intermittently beginning on Thursday, 2026-08-06 08:00 PDT.\nOur engineering team is continuing to implement the mitigation and initiated the backfill in parallel. We will provide an update by Thursday, 2026-08-13 05:00 PDT with current details.\n**Symptoms**\nSome Google SecOps customers in the US may experience low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-13T05:55:00+00:00","modified":"2026-08-13T07:47:36+00:00","when":"2026-08-13T05:55:00+00:00","text":"**Summary**\nGoogle SecOps customers in the us multi-region may experience delays in Legacy BigQuery Export Jobs.\n**Description**\nWe are experiencing an issue with Google SecOps Legacy BigQuery export jobs failing intermittently beginning on Thursday, 2026-08-06 08:00 PDT.\nOur engineering team is continuing to implement the mitigation and initiated the backfill in parallel. We will provide an update by Thursday, 2026-08-13 02:00 PDT with current details.\n**Symptoms**\nSome Google SecOps customers in the US may experience low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-13T03:05:38+00:00","modified":"2026-08-13T05:55:00+00:00","when":"2026-08-13T03:05:38+00:00","text":"**Summary**\nGoogle SecOps customers in the us multi-region may experience delays in Legacy BigQuery Export Jobs.\n**Description**\nWe are experiencing an issue with Google SecOps Legacy BigQuery export jobs failing intermittently beginning on Tuesday, 2026-08-11 08:00 PDT.\nOur engineering team is actively implementing the mitigation. We expect the mitigation to be completed by Wednesday, 2026-08-12 22:00 PDT.\nWe will provide an update by Wednesday, 2026-08-12 23:00 PDT with current details.\n**Symptoms**\nSome Google SecOps customers in the US may experience low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-13T01:45:59+00:00","modified":"2026-08-13T03:05:38+00:00","when":"2026-08-13T01:45:59+00:00","text":"**Summary**\nGoogle SecOps customers in the us multi-region may experience delays in Legacy BigQuery Export Jobs.\n**Description**\nWe are experiencing an issue with Google SecOps Legacy BigQuery export jobs failing intermittently beginning on Tuesday, 2026-08-11 08:00 PDT.\nOur engineering team is working to mitigate the issue.\nWe will provide an update by Wednesday, 2026-08-12 20:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nSome Google SecOps customers in the US may experience low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-08-13T18:20:41+00:00","modified":"2026-08-13T18:20:42+00:00","when":"2026-08-13T18:20:41+00:00","text":"**Summary**\nGoogle SecOps customers in the US multi-region may have experienced delays in Legacy BigQuery Export Jobs.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-08-13 10:58 PDT.\nWe thank you for your patience while we worked on resolving the issue.\nWe are targeting backfill completion by Tuesday, 2026-08-18 17:00 PDT.\n**Symptoms**\nSome Google SecOps customers in the US may have experienced low data freshness or gaps in results when querying SecOps linked datasets from BigQuery.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/CtZFZSVt6NrNBixapNUo","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"MdD2Weoy5R2tKdVbR3Dy","number":"6294392662993060108","begin":"2026-08-11T03:33:00+00:00","created":"2026-08-11T05:11:52+00:00","end":"2026-08-11T06:00:00+00:00","modified":"2026-08-11T06:58:21+00:00","external_desc":"Some Google SecOps customers in the US multiregion may experience delays with data normalization and detections.","updates":[{"created":"2026-08-11T06:58:21+00:00","modified":"2026-08-11T06:58:21+00:00","when":"2026-08-11T06:58:21+00:00","text":"**Summary**\nSome Google SecOps customers in the US multiregion may have experienced delays with data normalization and detections.\n**Description**\nAn issue with Google SecOps in the US multiregion has been resolved for all customers as of Monday, 2026-08-10 23:00 PDT.\nPreliminary analysis indicates that a parser configuration issue caused delays in detections and data normalization. The issue was successfully mitigated after our engineers rolled back the changes.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nIn the US multiregion, some Google SecOps customers may have experienced delays with data normalization and detections.\n**Workaround**\nNone at this time. The issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-11T06:17:39+00:00","modified":"2026-08-11T06:58:21+00:00","when":"2026-08-11T06:17:39+00:00","text":"**Summary**\nSome Google SecOps customers in the US multiregion may experience delays with data normalization and detections.\n**Description**\nWe are experiencing an issue with Google SecOps in the US multiregion causing delays in data normalization and detections for some customers, starting on Monday, 2026-08-10 20:33 PDT.\nOur engineers identified the root cause and are working on mitigation. We currently do not have an ETA for mitigation.\nWe will provide an update by Tuesday, 2026-08-11 02:30 PDT with current details.\n**Symptoms**\nIn the US multiregion, Some Google SecOps customers may experience delays with data normalization and detections.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-11T05:11:52+00:00","modified":"2026-08-11T06:17:57+00:00","when":"2026-08-11T05:11:52+00:00","text":"**Summary**\nSome Google SecOps customers in the US multiregion may experience delays with data normalization and detections.\n**Description**\nWe are experiencing an issue with Google SecOps in the US multiregion causing data normalization and detections delays for some customers, starting on Monday, 2026-08-10 20:33 PDT.\nOur engineering team is currently investigating the issue.\nWe will provide an update by Monday, 2026-08-10 23:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nIn the US multiregion, Some Google SecOps customers may experience delays with data normalization and detections.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-08-11T06:58:21+00:00","modified":"2026-08-11T06:58:21+00:00","when":"2026-08-11T06:58:21+00:00","text":"**Summary**\nSome Google SecOps customers in the US multiregion may have experienced delays with data normalization and detections.\n**Description**\nAn issue with Google SecOps in the US multiregion has been resolved for all customers as of Monday, 2026-08-10 23:00 PDT.\nPreliminary analysis indicates that a parser configuration issue caused delays in detections and data normalization. The issue was successfully mitigated after our engineers rolled back the changes.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nIn the US multiregion, some Google SecOps customers may have experienced delays with data normalization and detections.\n**Workaround**\nNone at this time. The issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/MdD2Weoy5R2tKdVbR3Dy","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"AMwRXujccQPLVtub6ajo","number":"13810058692752135407","begin":"2026-08-10T15:45:00+00:00","created":"2026-08-10T16:15:18+00:00","end":"2026-08-10T16:03:00+00:00","modified":"2026-08-10T16:20:04+00:00","external_desc":"Mandiant Managed Defense customers may experience elevated errors when logging in.","updates":[{"created":"2026-08-10T16:20:02+00:00","modified":"2026-08-10T16:20:04+00:00","when":"2026-08-10T16:20:02+00:00","text":"**Summary**\nMandiant Managed Defense customers may have experienced elevated errors when logging in.\n**Description**\nThe issue with Mandiant Managed Defense has been resolved for all affected users as of Monday, 2026-08-10 09:03 PDT.\nThe issue was due to a recent software update. Our engineers have mitigated the issue by rolling back to a previous version.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have experienced elevated errors when logging in..\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-10T16:15:18+00:00","modified":"2026-08-10T16:20:02+00:00","when":"2026-08-10T16:15:18+00:00","text":"**Summary**\nMandiant Managed Defence customers may experience elevated errors when logging in\n**Description**\nWe are experiencing an issue with Mandiant Managed Defence Monday, 2026-08-10 08:45 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Monday, 2026-08-10 09:45 PDT. with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nCustomers may experience elevated errors when logging in.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-08-10T16:20:02+00:00","modified":"2026-08-10T16:20:04+00:00","when":"2026-08-10T16:20:02+00:00","text":"**Summary**\nMandiant Managed Defense customers may have experienced elevated errors when logging in.\n**Description**\nThe issue with Mandiant Managed Defense has been resolved for all affected users as of Monday, 2026-08-10 09:03 PDT.\nThe issue was due to a recent software update. Our engineers have mitigated the issue by rolling back to a previous version.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have experienced elevated errors when logging in..\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"9aKw9s8p43AYeBmo4Gvx","service_name":"Mandiant Managed Defense","affected_products":[{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/AMwRXujccQPLVtub6ajo","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"opdBZdPY1GLg3dpUmfZi","number":"313400781353666422","begin":"2026-08-04T18:01:00+00:00","created":"2026-08-04T18:57:25+00:00","end":"2026-08-04T22:09:00+00:00","modified":"2026-08-04T22:47:59+00:00","external_desc":"[Mitigated] Some Google SecOps customers may have experienced an issue where their SecOps dashboards (Looker based) failed to load and display data.","updates":[{"created":"2026-08-04T22:47:42+00:00","modified":"2026-08-04T22:47:59+00:00","when":"2026-08-04T22:47:42+00:00","text":"**Title**\n[Mitigated] Some Google SecOps customers may have experienced an issue where their SecOps dashboards (Looker based) failed to load and display data.\n**Description**\nThe issue affecting Looker Dashboards in Google SecOps has been mitigated for all affected customers in all affected regions as of Tuesday, 2026-08-04 15:09 US/Pacific.\nFrom preliminary analysis, the issue was triggered by a configuration change in the backend database.\nOur engineers mitigated the issue by rolling back the configuration change.\nWe thank you for your patience while we worked on mitigating the issue.\n**Symptoms**\nAffected customers in below regions may have experienced an issue where their Looker based Dashboards in SecOps failed to load and display data.\nImpacted Regions: asia-south1, asia-northeast1, australia-southeast1, europe-west3, europe-west6, northamerica-northeast2, southamerica-east1.\n**Workaround**\nNone as the issue is now mitigated. All customers in the impacted regions should now be able to load and display data with their Looker Dashboards.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-04T21:12:13+00:00","modified":"2026-08-04T22:47:42+00:00","when":"2026-08-04T21:12:13+00:00","text":"**Title**\nSome Google SecOps customers may experience an issue where their SecOps dashboards (Looker based) fail to load and display data.\n**Description**\nWe are experiencing an issue with Looker based Dashboards in Google Secops, beginning on Tuesday, 2026-08-04 11:01 PDT.\nOur engineering team is actively investigating the cause to determine a mitigation strategy.\nWe will provide an update by Tuesday, 2026-08-04 17:00 PDT with details.\n**Symptoms**\nAffected customers in below regions may experience an issue where their Looker based Dashboards in SecOps fail to load and display data.\nImpacted Regions: asia-south1, asia-northeast1, australia-southeast1, europe-west3, europe-west6, northamerica-northeast2, southamerica-east1.\n**Workaround**\nCustomers shall be able to use native dashboards as an alternative for running dashboard queries while we are actively working on fixing the issue.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]},{"created":"2026-08-04T18:57:25+00:00","modified":"2026-08-04T21:12:13+00:00","when":"2026-08-04T18:57:25+00:00","text":"**Summary**\nCustomers in the asia-south1 region may experience an issue where their SecOps dashboards (Looker based) fail to load and display data.\n**Description**\nWe are experiencing an issue with Looker based Dashboards in Secops, beginning on Tuesday, 2026-08-04 11:01 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2026-08-04 14:00 PDT with details.\n**Diagnosis / Customer Symptoms**\nCustomers in the asia-south1 region may experience an issue where their Looker based Dashboards in SecOps fail to load and display data.\n**Workaround**\nCustomers shall be able to use native dashboards as an alternative for running dashboard queries while we are actively working on fixing the issue.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Mumbai (asia-south1)","id":"asia-south1"}]}],"most_recent_update":{"created":"2026-08-04T22:47:42+00:00","modified":"2026-08-04T22:47:59+00:00","when":"2026-08-04T22:47:42+00:00","text":"**Title**\n[Mitigated] Some Google SecOps customers may have experienced an issue where their SecOps dashboards (Looker based) failed to load and display data.\n**Description**\nThe issue affecting Looker Dashboards in Google SecOps has been mitigated for all affected customers in all affected regions as of Tuesday, 2026-08-04 15:09 US/Pacific.\nFrom preliminary analysis, the issue was triggered by a configuration change in the backend database.\nOur engineers mitigated the issue by rolling back the configuration change.\nWe thank you for your patience while we worked on mitigating the issue.\n**Symptoms**\nAffected customers in below regions may have experienced an issue where their Looker based Dashboards in SecOps failed to load and display data.\nImpacted Regions: asia-south1, asia-northeast1, australia-southeast1, europe-west3, europe-west6, northamerica-northeast2, southamerica-east1.\n**Workaround**\nNone as the issue is now mitigated. All customers in the impacted regions should now be able to load and display data with their Looker Dashboards.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/opdBZdPY1GLg3dpUmfZi","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]},{"id":"HKgENiUpsVvCw696crdF","number":"17139469178752401967","begin":"2026-08-01T03:49:00+00:00","created":"2026-08-01T05:26:32+00:00","end":"2026-08-01T05:41:00+00:00","modified":"2026-08-01T06:06:13+00:00","external_desc":"Mandiant Threat Defense customers' investigation reports may experience delays in publication.","updates":[{"created":"2026-08-01T06:05:46+00:00","modified":"2026-08-01T06:06:13+00:00","when":"2026-08-01T06:05:46+00:00","text":"**Summary**:\n[Resolved]Mandiant Managed Defense and Mandiant Hunt customers' investigation reports may have experienced delays in publication.\n**Description**\nThe issue with Mandiant Managed Defense, Mandiant Hunt has been resolved for all affected users as of Friday, 2026-07-31 22:41 PDT.\nInvestigation reports may have encountered delays while this issue was investigated.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nMandiant Managed Defense and Mandiant Hunt customer’s investigation reports may have experienced delays in publication.\n**Workaround**\nNone at this time as the issue stands resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-01T05:55:39+00:00","modified":"2026-08-01T06:05:46+00:00","when":"2026-08-01T05:55:39+00:00","text":"**Summary**:\nMandiant Managed Defense and Mandiant Hunt customers' investigation reports may experience delays in publication.\n**Description**\nWe are experiencing an issue with Mandiant Managed Defense and Mandiant Hunt beginning on Friday, 2026-07-31 20:49 PDT.\nInvestigation reports may encounter delays until this issue is resolved. Our engineering team continues to investigate the issue.\nWe will provide an update by Friday, 2026-07-31 23:55 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nMandiant Managed Defense and Mandiant Hunt customer’s investigation reports may experience delays in publication.\n**Workaround**\nNone at this time","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T05:26:32+00:00","modified":"2026-08-01T05:55:39+00:00","when":"2026-08-01T05:26:32+00:00","text":"**Summary**:\nMandiant Threat Defense customers' investigation reports may experience delays in publication.\n**Description**\nWe are experiencing an issue with Mandiant Managed Defense beginning on Friday, 2026-07-31 20:49 PDT.\nInvestigation reports may encounter delays until this issue is resolved. Our engineering team continues to investigate the issue.\nWe will provide an update by Friday, 2026-07-31 23:45 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nMandiant Threat Defense customer’s investigation reports may experience delays in publication.\n**Workaround**\nNone at this time","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-08-01T06:05:46+00:00","modified":"2026-08-01T06:06:13+00:00","when":"2026-08-01T06:05:46+00:00","text":"**Summary**:\n[Resolved]Mandiant Managed Defense and Mandiant Hunt customers' investigation reports may have experienced delays in publication.\n**Description**\nThe issue with Mandiant Managed Defense, Mandiant Hunt has been resolved for all affected users as of Friday, 2026-07-31 22:41 PDT.\nInvestigation reports may have encountered delays while this issue was investigated.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nMandiant Managed Defense and Mandiant Hunt customer’s investigation reports may have experienced delays in publication.\n**Workaround**\nNone at this time as the issue stands resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"zall","service_name":"Multiple Products","affected_products":[{"title":"Mandiant Hunt","id":"uomxopvCRv8y7bvrA1tK"},{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/HKgENiUpsVvCw696crdF","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"wCAYU8nZcNY1sMVJPb7p","number":"1674716426321734954","begin":"2026-07-31T17:11:00+00:00","created":"2026-07-31T17:49:10+00:00","end":"2026-08-02T05:53:00+00:00","modified":"2026-08-02T06:10:55+00:00","external_desc":"SecOps customers are experiencing delays in data freshness for Stats Search in multiple regions.","updates":[{"created":"2026-08-02T06:10:12+00:00","modified":"2026-08-02T06:10:55+00:00","when":"2026-08-02T06:10:12+00:00","text":"**Summary**\n[Resolved] Google SecOps customers may have experienced delays in data freshness for Search, Stats Search, and Rule re-evaluation in multiple regions.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Saturday, 2026-08-01 22:53 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nAffected customers might have observed some data older than 24 hours missing, as well as incomplete Search results for some of these hours older than the last 24 hours, and rule re-evaluation may not have taken place for data ingested for those hours.\n**Workaround**\nNone at this time as the issue stands resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-02T03:42:40+00:00","modified":"2026-08-02T06:10:12+00:00","when":"2026-08-02T03:42:40+00:00","text":"**Summary**\nGoogle SecOps customers may experience delays in data freshness for Search, Stats Search, and Rule re-evaluation in multiple regions.\n**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Search, Stats Search, and Rule re-evaluation which began on Friday, 2026-07-31 10:11 PDT.\nThe issue is mitigated for most of the regions. Mitigation work is currently underway by our engineering team in Multi Region-us.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Sunday, 2026-08-02 3:00 PDT.\n**Symptoms**\nAffected customers might see some data older than 24 hours missing, as well as incomplete Search results for some of these hours older than last 24 hours, and rule re-evaluation may not take place for data ingested for those hours.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T23:38:42+00:00","modified":"2026-08-02T03:42:40+00:00","when":"2026-08-01T23:38:42+00:00","text":"**Summary**\nGoogle SecOps customers may experience delays in data freshness for Search, Stats Search, and Rule re-evaluation in multiple regions.\n**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Search, Stats Search, and Rule re-evaluation which began on Friday, 2026-07-31 10:11 PDT.\nThe issue is mitigated for most of the regions. Mitigation work is currently underway by our engineering team in Multi Region-us.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Saturday, 2026-08-01 21:00 PDT.\n**Symptoms**\nAffected customers might see some data older than 24 hours missing, as well as incomplete Search results for some of these hours older than last 24 hours, and rule re-evaluation may not take place for data ingested for those hours.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T16:07:09+00:00","modified":"2026-08-01T23:38:42+00:00","when":"2026-08-01T16:07:09+00:00","text":"**Summary**\nGoogle SecOps customers may experience delays in data freshness for Search, Stats Search, and Rule re-evaluation in multiple regions.\n**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Search, Stats Search, and Rule re-evaluation which began on Friday, 2026-07-31 10:11 PDT.\nThe issue is mitigated for most of the regions. Mitigation work is currently underway by our engineering team in Multi Region-us, Multi Region-eu and europe-west3.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Saturday, 2026-08-01 16:00 PDT\n**Symptoms**\nAffected customers may observe inconsistent analytical and aggregate results for approximately the last 24 hours of ingested data in Stats Search, as well as incomplete Search results over the last 24 hours, and rule re-evaluation may not take place for data ingested in the last 24 hours.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T04:59:20+00:00","modified":"2026-08-01T16:07:09+00:00","when":"2026-08-01T04:59:20+00:00","text":"**Summary**\nGoogle SecOps customers may experience delays in data freshness for Search, Stats Search, and Rule re-evaluation in multiple regions.\n**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Search, Stats Search, and Rule re-evaluation which began on Friday, 2026-07-31 10:11 PDT.\nThe issue is mitigated for most of the regions. Mitigation work is currently underway by our engineering team in Multi Region-us,asia-south1,asia-southeast1,australia-southeast1, Multi Region-eu,europe-west3,me-west1 and northamerica-northeast2.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Saturday, 2026-08-01 10:30 PDT.\nWe thank you for your patience while we resolve the issue.\n**Symptoms**\nAffected customers may observe inconsistent analytical and aggregate results for approximately the last 24 hours of ingested data in Stats Search, as well as incomplete Search results over the last 24 hours, and rule re-evaluation may not take place for data ingested in the last 24 hours.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T00:02:20+00:00","modified":"2026-08-01T04:59:20+00:00","when":"2026-08-01T00:02:20+00:00","text":"**Summary**\nSecOps customers are experiencing delays in data freshness for Search, Stats Search, and Rules Reevaluation in multiple regions.\n**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Search, Stats Search, and Rule re-evaluation which began on Friday, 2026-07-31 10:11 PDT.\nOur engineering team is actively investigating and implementing a mitigation. A mitigation ETA is not available at this time.\nWe will provide an update by Friday, 2026-07-31 22:00 PDT with details.\nWe thank you for your patience while we resolve the issue.\n**Symptoms**\nAffected customers will see inconsistent analytical and aggregate results for approximately the last 24 hours of ingested data in Stats Search, as well as incomplete Search results over the last 24 hours, and rule re-evaluation may not take place for data ingested in the last 24 hours.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T22:57:47+00:00","modified":"2026-08-01T00:02:20+00:00","when":"2026-07-31T22:57:47+00:00","text":"**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Stats Search which began on Friday, 2026-07-31 10:11 PDT.\nOur engineering team is actively investigating and implementing a mitigation. A mitigation ETA is not available at this time.\nWe will provide an update by Friday, 2026-07-31 17:30 PDT with details.\nWe thank you for your patience while we resolve the issue.\n**Symptoms**\nAffected customers will see inconsistent analytical and aggregate results for approximately the last 20 hours of ingested data in Stats Search.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T19:44:11+00:00","modified":"2026-07-31T22:57:47+00:00","when":"2026-07-31T19:44:11+00:00","text":"**Description**\nGoogle SecOps customers are experiencing delays in data freshness for Stats Search, which began on Friday, 2026-07-31 10:11 PDT.\nOur engineering team is actively investigating and implementing a mitigation. A mitigation ETA is not available at this time.\nWe will provide an update by Friday, 2026-07-31 16:00 PDT with details.\nWe thank you for your patience while we resolve the issue.\n**Symptoms**\nAffected customers will see inconsistent analytical and aggregate results for approximately the last 20 hours of ingested data in Stats Search.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T18:04:59+00:00","modified":"2026-07-31T19:44:11+00:00","when":"2026-07-31T18:04:59+00:00","text":"**Description**\nWe are experiencing a Google SecOps issue, beginning on Friday, 2026-07-31 10:11 PDT.\nThe root cause of the issue is under investigation.\nThere is no action required by customers. Stats data will be refreshed by the engineering team once the issue is resolved.\nWe will provide an update by Friday, 2026-07-31 12:45 PDT with details.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nDelays in data availability for stats search for customers with SecOps tenants in multiple European and asia-southeast1 regions.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"created":"2026-07-31T17:49:10+00:00","modified":"2026-07-31T18:04:59+00:00","when":"2026-07-31T17:49:10+00:00","text":"**Description**\nWe will provide more information by Friday, 2026-07-31 11:10 PDT.\n**Symptoms**\nWe are investigating a potential issue with Google SecOps.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-08-02T06:10:12+00:00","modified":"2026-08-02T06:10:55+00:00","when":"2026-08-02T06:10:12+00:00","text":"**Summary**\n[Resolved] Google SecOps customers may have experienced delays in data freshness for Search, Stats Search, and Rule re-evaluation in multiple regions.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Saturday, 2026-08-01 22:53 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nAffected customers might have observed some data older than 24 hours missing, as well as incomplete Search results for some of these hours older than the last 24 hours, and rule re-evaluation may not have taken place for data ingested for those hours.\n**Workaround**\nNone at this time as the issue stands resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/wCAYU8nZcNY1sMVJPb7p","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"4mE1D6KqwNiKfzWdWacd","number":"7745059395068984794","begin":"2026-07-29T18:45:00+00:00","created":"2026-07-30T16:30:53+00:00","end":"2026-07-30T17:57:00+00:00","modified":"2026-07-30T18:27:00+00:00","external_desc":"Google SecOps customers are currently unable to load the MITRE Attack UI Tab.","updates":[{"created":"2026-07-30T18:27:00+00:00","modified":"2026-07-30T18:27:01+00:00","when":"2026-07-30T18:27:00+00:00","text":"**Summary**\nGoogle SecOps customers were unable to load the MITRE Attack UI Tab.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-07-30 10:57 US/Pacific.\nFrom preliminary analysis, we have identified that the issue was triggered by a recent change and engineers mitigated the issue once the change was rolled back.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nGoogle SecOps customers were unable to load the MITRE Attack UI Tab.\n**Workaround**\nThe issue is now resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-30T17:19:25+00:00","modified":"2026-07-30T18:27:00+00:00","when":"2026-07-30T17:19:25+00:00","text":"**Summary**\nGoogle SecOps customers are currently unable to load the MITRE Attack UI Tab.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Wednesday, 2026-07-29 11:45 PDT.\nOur engineering team has identified the root cause and are rolling out a fix. We do not have an ETA for mitigation at this point.\nWe will provide an update by Thursday, 2026-07-30 11:30 PDT with current details.\n**Symptoms**\nGoogle SecOps customers are currently unable to load the MITRE Attack UI Tab.\n**Workaround**\nAPI access is still available. Customers can build their own list, table, or visualization of MITRE coverage by calling the list rules api (https://docs.cloud.google.com/chronicle/docs/detection/unified-rules/unified-rules-api), and inspecting the \"tags\" field. The MITRE tags listed there are the same data source used to drive the MITRE visualization in SecOps.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-07-30T16:30:53+00:00","modified":"2026-07-30T17:19:25+00:00","when":"2026-07-30T16:30:53+00:00","text":"**Summary**\nGoogle SecOps customers are currently unable to load the MITRE Attack UI Tab.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Wednesday, 2026-07-29 11:45 PDT.\nOur engineering team has identified the root cause and are working on a mitigation.\nWe will provide an update by Thursday, 2026-07-30 10:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nGoogle SecOps customers are currently unable to load the MITRE Attack UI Tab.\n**Workaround**\nAPI access is still available. Customers can build their own list, table, or visualization of MITRE coverage by calling the list rules api (https://docs.cloud.google.com/chronicle/docs/detection/unified-rules/unified-rules-api), and inspecting the \"tags\" field. The MITRE tags listed there are the same data source used to drive the MITRE visualization in SecOps.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-07-30T18:27:00+00:00","modified":"2026-07-30T18:27:01+00:00","when":"2026-07-30T18:27:00+00:00","text":"**Summary**\nGoogle SecOps customers were unable to load the MITRE Attack UI Tab.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-07-30 10:57 US/Pacific.\nFrom preliminary analysis, we have identified that the issue was triggered by a recent change and engineers mitigated the issue once the change was rolled back.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nGoogle SecOps customers were unable to load the MITRE Attack UI Tab.\n**Workaround**\nThe issue is now resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/4mE1D6KqwNiKfzWdWacd","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"id":"fLe9KMUwv3Fbsj9NvxZc","number":"17716462926649562023","begin":"2026-07-23T16:00:00+00:00","created":"2026-07-30T22:27:19+00:00","end":"2026-08-14T16:34:00+00:00","modified":"2026-08-14T23:33:12+00:00","external_desc":"Some Google SecOps customers may have experienced missing data for UEBA metrics.","updates":[{"created":"2026-08-14T23:31:08+00:00","modified":"2026-08-14T23:33:12+00:00","when":"2026-08-14T23:31:08+00:00","text":"**Title**\nSome Google SecOps customers may have experienced missing data for UEBA metrics.\n**Description**\nThe issue with Google Google SecOps has been mitigated for all affected customers as of Friday, 2026-08-14 09:34 US/Pacific.\nFrom preliminary analysis, the issue was triggered by elevated data processing volumes and localized infrastructure resource constraints that led to processing delays in the analytics pipeline.\nOur engineers mitigated the issue by scaling up the system resource capacity, optimizing pipeline data processing, and segmenting workloads to prevent processing bottlenecks.\nWe thank you for your patience while we worked on mitigating the issue.\n**Symptoms**\nAffected US customers may have had metrics-based rules failing to return detections and missing data for UEBA metrics. Automatic reprocessing may result in new detections dating back to the start of the incident.\n**Workaround**\nNone as the issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-08-12T00:00:40+00:00","modified":"2026-08-14T23:31:08+00:00","when":"2026-08-12T00:00:40+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nWe’ve successfully mitigated the issue for hourly metrics however, mitigation for daily metrics is ongoing.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Friday, 2026-08-14 17:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics-based rules failing to return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-10T17:10:32+00:00","modified":"2026-08-12T00:00:40+00:00","when":"2026-08-10T17:10:32+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nWe’ve successfully mitigated the issue for hourly metrics however, mitigation for daily metrics is ongoing.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Tuesday, 2026-08-11 17:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-07T17:08:01+00:00","modified":"2026-08-10T17:10:32+00:00","when":"2026-08-07T17:08:01+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Monday, 2026-08-10 10:00 PDT with current details.\n.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-06T08:09:07+00:00","modified":"2026-08-07T17:08:01+00:00","when":"2026-08-06T08:09:07+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Friday, 2026-08-07 10:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-05T04:29:59+00:00","modified":"2026-08-06T08:09:07+00:00","when":"2026-08-05T04:29:59+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Thursday, 2026-08-06 10:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-04T16:47:23+00:00","modified":"2026-08-05T04:29:59+00:00","when":"2026-08-04T16:47:23+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Tuesday, 2026-08-04 22:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-04T00:50:41+00:00","modified":"2026-08-04T16:47:23+00:00","when":"2026-08-04T00:50:41+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Tuesday, 2026-08-04 10:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-03T16:49:10+00:00","modified":"2026-08-04T00:50:41+00:00","when":"2026-08-03T16:49:10+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Monday, 2026-08-03 18:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-02T16:26:54+00:00","modified":"2026-08-03T16:49:10+00:00","when":"2026-08-02T16:26:54+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and continues to roll out mitigation, which has taken longer than originally anticipated.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Monday, 2026-08-03 10:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T16:47:17+00:00","modified":"2026-08-02T16:26:54+00:00","when":"2026-08-01T16:47:17+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and is currently rolling out mitigation which is expected to complete in the next 24 hours.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Saturday, 2026-08-02 10:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T03:42:16+00:00","modified":"2026-08-01T16:47:17+00:00","when":"2026-08-01T03:42:16+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and has a partial mitigation in place while continuing to work on full mitigation.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Saturday, 2026-08-01 10:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-08-01T00:36:49+00:00","modified":"2026-08-01T03:42:16+00:00","when":"2026-08-01T00:36:49+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and has a partial mitigation in place while continuing to work on full mitigation.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Friday, 2026-07-31 22:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T21:28:11+00:00","modified":"2026-08-01T00:36:49+00:00","when":"2026-07-31T21:28:11+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team has identified the cause of this issue and has a partial mitigation in place while continuing to work on full mitigation.\nFull metrics backfill and UEBA rules reprocessing is expected to take up to a week to complete for all customers.\nWe will provide an update by Friday, 2026-07-31 18:00 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nOur engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T16:01:26+00:00","modified":"2026-07-31T21:28:11+00:00","when":"2026-07-31T16:01:26+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team continues to investigate the cause of this issue while also working on a mitigation strategy.\nWe will provide an update by Friday, 2026-07-31 14:30 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nNone at this time. Our engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T06:28:46+00:00","modified":"2026-07-31T16:01:26+00:00","when":"2026-07-31T06:28:46+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team continues to investigate the cause of this issue while also working on a mitigation strategy.\nWe will provide an update by Friday, 2026-07-31 09:30 PDT with current details.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nNone at this time. Our engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-31T04:48:36+00:00","modified":"2026-07-31T06:28:46+00:00","when":"2026-07-31T04:48:36+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team continues to investigate the cause of this issue while also working on a mitigation strategy.\nWe will provide an update by Friday, 2026-07-31 02:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nNone at this time. Our engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-30T23:46:54+00:00","modified":"2026-07-31T04:48:36+00:00","when":"2026-07-30T23:46:54+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team continues to investigate the cause of this issue while also working on a mitigation strategy.\nWe will provide an update by Thursday, 2026-07-30 21:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and may have missing data for UEBA metrics.\n**Workaround**\nNone at this time. Our engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-30T22:51:20+00:00","modified":"2026-07-30T23:46:54+00:00","when":"2026-07-30T22:51:20+00:00","text":"**Title**\nSome Google SecOps customers may be experiencing missing data for UEBA metrics.\n**Description**\nWe are experiencing an issue with Google SecOps beginning Thursday, 2026-07-23 09:00 PDT.\nOur engineering team is investigating the cause of this issue and is working on a mitigation strategy.\nWe will provide an update by Thursday, 2026-07-30 17:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nAffected US customers may have metrics based rules not return detections and missing data for UEBA metrics.\n**Workaround**\nNone at this time. Our engineering team will trigger metrics backfill and re-run UEBA rules once the issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-30T22:27:19+00:00","modified":"2026-07-30T22:51:20+00:00","when":"2026-07-30T22:27:19+00:00","text":"**Title**\nWe are investigating a potential issue with Google SecOps.\n**Description**\nWe are experiencing an issue with Google SecOps beginning at Thursday, 2026-07-23 09:00 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-07-30 16:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nNone at this time.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-08-14T23:31:08+00:00","modified":"2026-08-14T23:33:12+00:00","when":"2026-08-14T23:31:08+00:00","text":"**Title**\nSome Google SecOps customers may have experienced missing data for UEBA metrics.\n**Description**\nThe issue with Google Google SecOps has been mitigated for all affected customers as of Friday, 2026-08-14 09:34 US/Pacific.\nFrom preliminary analysis, the issue was triggered by elevated data processing volumes and localized infrastructure resource constraints that led to processing delays in the analytics pipeline.\nOur engineers mitigated the issue by scaling up the system resource capacity, optimizing pipeline data processing, and segmenting workloads to prevent processing bottlenecks.\nWe thank you for your patience while we worked on mitigating the issue.\n**Symptoms**\nAffected US customers may have had metrics-based rules failing to return detections and missing data for UEBA metrics. Automatic reprocessing may result in new detections dating back to the start of the incident.\n**Workaround**\nNone as the issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/fLe9KMUwv3Fbsj9NvxZc","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"nznNfGWQCeBh3XC3c1oB","number":"6721985997722727317","begin":"2026-07-23T13:50:00+00:00","created":"2026-07-23T16:13:05+00:00","end":"2026-07-23T17:22:00+00:00","modified":"2026-07-23T17:56:50+00:00","external_desc":"We are experiencing an issue impacting Google SecOps customers in Europe MultiRegion.","updates":[{"created":"2026-07-23T17:56:30+00:00","modified":"2026-07-23T17:56:50+00:00","when":"2026-07-23T17:56:30+00:00","text":"[Mitigated] We experienced an issue impacting Google SecOps customers in Europe MultiRegion.\n**Description :**\nThe issue with Search/Dashboard query performance in the Europe region is now resolved for all users as of Thursday, 2026-07-23 10:22 PDT.\n**Symptoms :**\nSome Google SecOps customers in the Europe MultiRegion may have experienced higher latency and failures with dashboard and search queries for all data sources.\n**Workaround :**\nNone.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-23T17:03:47+00:00","modified":"2026-07-23T17:56:30+00:00","when":"2026-07-23T17:03:47+00:00","text":"We are experiencing an issue impacting Google SecOps customers in Europe MultiRegion.\n**Description :**\nWe are experiencing an issue with Search/Dashboard query performance in the Europe region starting Thursday, 2026-07-23 06:50 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Thursday, 2026-07-23 12:30 PDT.\n**Symptoms :**\nSome Google SecOps customers in europe multi region may experience higher latency and failures with dashboard and search queries for all data sources.\n**Workaround :**\nNone at this time","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"created":"2026-07-23T16:13:05+00:00","modified":"2026-07-23T17:03:47+00:00","when":"2026-07-23T16:13:05+00:00","text":"**Description :**\nWe are experiencing an issue with Search/Dashboard query performance in Europe region starting Thursday, 2026-07-23 06:50 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Thursday, 2026-07-23 10:00 PDT.\nWe apologize to all who are affected by the disruption.\n**Symptoms :**\nSome Google SecOps customers in europe multi region may experience higher latency and failures with dashboard and search queries for all data sources\n**Workaround :**\nNone at this time","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2026-07-23T17:56:30+00:00","modified":"2026-07-23T17:56:50+00:00","when":"2026-07-23T17:56:30+00:00","text":"[Mitigated] We experienced an issue impacting Google SecOps customers in Europe MultiRegion.\n**Description :**\nThe issue with Search/Dashboard query performance in the Europe region is now resolved for all users as of Thursday, 2026-07-23 10:22 PDT.\n**Symptoms :**\nSome Google SecOps customers in the Europe MultiRegion may have experienced higher latency and failures with dashboard and search queries for all data sources.\n**Workaround :**\nNone.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/nznNfGWQCeBh3XC3c1oB","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"Thj1x4tgntqSfvQeCciz","number":"3707446247808187703","begin":"2026-07-21T06:01:00+00:00","created":"2026-07-21T07:14:24+00:00","end":"2026-07-21T07:00:00+00:00","modified":"2026-07-21T08:00:39+00:00","external_desc":"[Mitigated] Some Google SecOps customers in the asia-southeast1 region may have experienced higher latency and failures when running dashboard queries.","updates":[{"created":"2026-07-21T08:00:04+00:00","modified":"2026-07-21T08:00:39+00:00","when":"2026-07-21T08:00:04+00:00","text":"**Description :**\nThe issue affecting Google SecOps in the asia-southeast1 region has been mitigated for all affected users as of Tuesday, 2026-07-21 00:00 PDT.\nPreliminary analysis indicates that the disruption was triggered by a system rollout, which caused a temporary spike in retries and query errors. Latency and error rates returned to normal upon completion of the rollout.\nThank you for your patience while we worked on resolving this issue.\n**Symptoms :**\nImpacted customers may have observed elevated latency or timeouts in asia-southeast1 when running dashboard queries.\n**Workaround :**\nNone, as the issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-21T07:14:24+00:00","modified":"2026-07-21T08:00:04+00:00","when":"2026-07-21T07:14:24+00:00","text":"**Description :**\nWe are experiencing an issue with query latency for Google SecOps Dashboards that began on Monday, 2026-07-20 23:01 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2026-07-21 01:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms :**\nImpacted customers may observe elevated latency or timeouts when running dashboard queries.\n**Workaround :**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-07-21T08:00:04+00:00","modified":"2026-07-21T08:00:39+00:00","when":"2026-07-21T08:00:04+00:00","text":"**Description :**\nThe issue affecting Google SecOps in the asia-southeast1 region has been mitigated for all affected users as of Tuesday, 2026-07-21 00:00 PDT.\nPreliminary analysis indicates that the disruption was triggered by a system rollout, which caused a temporary spike in retries and query errors. Latency and error rates returned to normal upon completion of the rollout.\nThank you for your patience while we worked on resolving this issue.\n**Symptoms :**\nImpacted customers may have observed elevated latency or timeouts in asia-southeast1 when running dashboard queries.\n**Workaround :**\nNone, as the issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/Thj1x4tgntqSfvQeCciz","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"id":"9KqnWfyMgWhD8tJUanLg","number":"5955639836579980651","begin":"2026-07-16T10:59:00+00:00","created":"2026-07-16T13:56:50+00:00","end":"2026-07-16T14:15:00+00:00","modified":"2026-07-16T14:37:03+00:00","external_desc":"Processing Delays for Google SecOps SIEM in Europe","updates":[{"created":"2026-07-16T14:36:49+00:00","modified":"2026-07-16T14:37:03+00:00","when":"2026-07-16T14:36:49+00:00","text":"**Description :**\nThe issue with Google SecOps has been resolved for all affected projects as of Thursday, 2026-07-16 07:15 PDT.\nOur engineering team identified the root cause and mitigated the issue completely.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms :**\nGoogle SecOps SIEM customers in the Europe region may have experienced processing delays, including a retry backlog and increased parsing latency.\n**Workaround :**\nNot Applicable.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-16T14:05:14+00:00","modified":"2026-07-16T14:36:49+00:00","when":"2026-07-16T14:05:14+00:00","text":"**Description :**\nMitigation work is currently underway by our engineering team.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Thursday, 2026-07-16 08:00 PDT.\n**Symptoms :**\nGoogle SecOps SIEM customers in the Europe region are experiencing processing delays, including a retry backlog and increased parsing latency.\n**Workaround :**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"created":"2026-07-16T13:56:50+00:00","modified":"2026-07-16T14:05:14+00:00","when":"2026-07-16T13:56:50+00:00","text":"**Description :**\nWe are experiencing an issue with Google SecOps beginning on Thursday, 2026-07-16 03:59 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-07-16 07:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms :**\nGoogle SecOps SIEM customers in the Europe region are experiencing processing delays, including a retry backlog and increased parsing latency.\n**Workaround :**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2026-07-16T14:36:49+00:00","modified":"2026-07-16T14:37:03+00:00","when":"2026-07-16T14:36:49+00:00","text":"**Description :**\nThe issue with Google SecOps has been resolved for all affected projects as of Thursday, 2026-07-16 07:15 PDT.\nOur engineering team identified the root cause and mitigated the issue completely.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms :**\nGoogle SecOps SIEM customers in the Europe region may have experienced processing delays, including a retry backlog and increased parsing latency.\n**Workaround :**\nNot Applicable.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/9KqnWfyMgWhD8tJUanLg","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"pL6gMEEqj8JQ7ycr6HJZ","number":"2790178560295824467","begin":"2026-07-08T11:32:00+00:00","created":"2026-07-08T12:51:35+00:00","end":"2026-07-08T14:14:00+00:00","modified":"2026-07-08T14:48:21+00:00","external_desc":"Google SecOps customers may experience errors when querying Search stats in the southamerica-east1 region","updates":[{"created":"2026-07-08T14:47:37+00:00","modified":"2026-07-08T14:48:21+00:00","when":"2026-07-08T14:47:37+00:00","text":"**Description**\nThe issue with Google SecOps where customers experienced errors when querying Search stats in the southamerica-east1 region is believed to be an edge case.\nWe identified an issue where search stat queries run from the search history fail if the original results have expired (after 24 hours). Instead of re-running the query, the system returns an error. As a temporary workaround, you can slightly adjust the time range to successfully re-execute the search.\nOur Engineering team will continue to work on fixing the issue. If you have questions or are impacted, please open a case with the Support Team and we will work with you until this issue is resolved.\nNo further updates will be provided here .\n**Symptoms**\nCustomers may experience errors with Search stats query in the southamerica-east1 region\n**Workaround**\nAs a temporary workaround, impacted customers can slightly adjust the time range to successfully re-execute the search if the original results have expired (after 24 hours)","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-08T12:51:35+00:00","modified":"2026-07-08T14:47:37+00:00","when":"2026-07-08T12:51:35+00:00","text":"**Description**\nWe are experiencing an issue with Google SecOps Search beginning on Wednesday, 2026-07-08 04:32 PDT.\nOur engineering team continues to investigate the issue and is working towards mitigation.\nWe will provide an update by Wednesday, 2026-07-08 07:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nCustomers may experience errors with Search stats query in the southamerica-east1 region\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]}],"most_recent_update":{"created":"2026-07-08T14:47:37+00:00","modified":"2026-07-08T14:48:21+00:00","when":"2026-07-08T14:47:37+00:00","text":"**Description**\nThe issue with Google SecOps where customers experienced errors when querying Search stats in the southamerica-east1 region is believed to be an edge case.\nWe identified an issue where search stat queries run from the search history fail if the original results have expired (after 24 hours). Instead of re-running the query, the system returns an error. As a temporary workaround, you can slightly adjust the time range to successfully re-execute the search.\nOur Engineering team will continue to work on fixing the issue. If you have questions or are impacted, please open a case with the Support Team and we will work with you until this issue is resolved.\nNo further updates will be provided here .\n**Symptoms**\nCustomers may experience errors with Search stats query in the southamerica-east1 region\n**Workaround**\nAs a temporary workaround, impacted customers can slightly adjust the time range to successfully re-execute the search if the original results have expired (after 24 hours)","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/pL6gMEEqj8JQ7ycr6HJZ","currently_affected_locations":[],"previously_affected_locations":[{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]},{"id":"nNbp5uM6dSFnPUmMYxDw","number":"16106189998643586487","begin":"2026-07-02T08:53:00+00:00","created":"2026-07-02T10:07:05+00:00","end":"2026-07-02T11:24:00+00:00","modified":"2026-07-02T11:44:06+00:00","external_desc":"[Mitigated] Some Google SecOps customers in Europe Multi-region may have experienced delays with data normalization and detections.","updates":[{"created":"2026-07-02T11:43:37+00:00","modified":"2026-07-02T11:44:06+00:00","when":"2026-07-02T11:43:37+00:00","text":"**Description**\nThe issue with Google SecOps in Europe Multi-region has been mitigated for affected users as of Tuesday, 2026-07-02 04:24 US/Pacific.\nThe issue was due to a data processing issue. The impact was limited to Europe Multi-region. Our engineers mitigated the issue by rolling out a fix. We will continue to monitor this environment.\nWe apologize to all who were affected by this disruption.\n**Symptoms**\nAffected Google SecOps customers in Europe Multi-region may have experienced delays with data normalization and detections.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-02T11:01:59+00:00","modified":"2026-07-02T11:43:37+00:00","when":"2026-07-02T11:01:59+00:00","text":"**Description**\nWe are experiencing an issue with Google SecOps in Europe multi-region causing data normalization and detections delays for some customers, beginning on Thursday 2026-07-02 01:53 US/Pacific.\nOur engineering team is actively implementing mitigation. We will continue to monitor the environment to ensure a complete and stable resolution. We do not have an ETA at this time.\nWe will provide another update by Thursday, 2026-07-02 06:00 US/Pacific with current details.\n**Symptoms**\nGoogle SecOps customers in Europe Multi-region may experience delays with data normalization and detections.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"created":"2026-07-02T10:07:05+00:00","modified":"2026-07-02T11:01:59+00:00","when":"2026-07-02T10:07:05+00:00","text":"**Description**\nWe are experiencing an issue with Google SecOps in Europe multi-region causing data normalization and detections delays for some customers, beginning on Thursday 2026-07-02 01:53 US/Pacific.\nOur engineering team is currently investigating the issue.\nWe will provide more information by Thursday 2026-07-02 04:00 US/Pacific with current details.\n**Symptoms**\nGoogle SecOps customers in Europe Multi-region may experience delays with data normalization and detections.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2026-07-02T11:43:37+00:00","modified":"2026-07-02T11:44:06+00:00","when":"2026-07-02T11:43:37+00:00","text":"**Description**\nThe issue with Google SecOps in Europe Multi-region has been mitigated for affected users as of Tuesday, 2026-07-02 04:24 US/Pacific.\nThe issue was due to a data processing issue. The impact was limited to Europe Multi-region. Our engineers mitigated the issue by rolling out a fix. We will continue to monitor this environment.\nWe apologize to all who were affected by this disruption.\n**Symptoms**\nAffected Google SecOps customers in Europe Multi-region may have experienced delays with data normalization and detections.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/nNbp5uM6dSFnPUmMYxDw","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"Q6ngYA21Gcfzq99RDgbM","number":"13927036411674683759","begin":"2026-07-01T21:45:00+00:00","created":"2026-07-02T03:02:59+00:00","end":"2026-07-02T04:40:00+00:00","modified":"2026-07-02T05:12:13+00:00","external_desc":"Google SecOps customers may be experiencing higher than normal search latency.","updates":[{"created":"2026-07-02T05:12:13+00:00","modified":"2026-07-02T05:12:13+00:00","when":"2026-07-02T05:12:13+00:00","text":"**Title**\nGoogle SecOps customers may have experienced higher than normal search latency.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Wednesday, 2026-07-01 21:40 PDT\nThe issue was triggered by a temporary spike in resource utilization caused by a small number of highly complex search queries. Our engineering teams successfully mitigated the impact by applying targeted rate-limiting controls to restore normal performance levels.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nThe impacted customers may have experienced higher than normal search latency when executing queries.\n**Workaround**\nThe issue is resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-07-02T04:56:57+00:00","modified":"2026-07-02T05:12:13+00:00","when":"2026-07-02T04:56:57+00:00","text":"**Title**\nGoogle SecOps customers may experience higher than normal search latency.\n**Description**\nMitigation work is currently underway by our engineering team.\nThe mitigation is expected to complete by Wednesday, 2026-07-01 22:30 PDT.\nWe will provide more information by Wednesday, 2026-07-01 22:40 PDT.\n**Symptoms**\nThe impacted customers may experience higher than normal search latency when executing queries.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-02T03:49:35+00:00","modified":"2026-07-02T04:56:57+00:00","when":"2026-07-02T03:49:35+00:00","text":"**Title**\nGoogle SecOps customers may experience higher than normal search latency.\n**Description**\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2026-07-01 22:00 PDT with current details.\n**Symptoms**\nThe impacted customers may experience higher than normal search latency when executing queries.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-07-02T03:02:59+00:00","modified":"2026-07-02T03:49:35+00:00","when":"2026-07-02T03:02:59+00:00","text":"**Title**\nGoogle SecOps customers may be experiencing higher than normal search latency.\n**Description**\nWe are experiencing an issue with Google SecOps beginning at Wednesday, 2026-07-01 14:45 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2026-07-01 21:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nThe customers may experience higher than normal search latency.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-07-02T05:12:13+00:00","modified":"2026-07-02T05:12:13+00:00","when":"2026-07-02T05:12:13+00:00","text":"**Title**\nGoogle SecOps customers may have experienced higher than normal search latency.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Wednesday, 2026-07-01 21:40 PDT\nThe issue was triggered by a temporary spike in resource utilization caused by a small number of highly complex search queries. Our engineering teams successfully mitigated the impact by applying targeted rate-limiting controls to restore normal performance levels.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nThe impacted customers may have experienced higher than normal search latency when executing queries.\n**Workaround**\nThe issue is resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/Q6ngYA21Gcfzq99RDgbM","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"6DNffu87AZXHHLd4VSqi","number":"4586301765053539647","begin":"2026-06-30T09:57:00+00:00","created":"2026-06-30T19:58:56+00:00","end":"2026-07-01T00:11:00+00:00","modified":"2026-07-01T00:32:00+00:00","external_desc":"A subset of Google Security Operations (SecOps) customers experienced a data freshness issue affecting Statistical Search and Dashboards","updates":[{"created":"2026-07-01T00:32:00+00:00","modified":"2026-07-01T00:32:00+00:00","when":"2026-07-01T00:32:00+00:00","text":"**Summary**\nA subset of Google Security Operations (SecOps) customers experienced a data freshness issue affecting Statistical Search and Dashboards.\n**Description**\nThe issue with Google Security Operations (SecOps) has been mitigated for affected users as of Tuesday, 2026-06-30 17:11 PDT. Data freshness for Statistical Search and Dashboards has recovered.\nThe issue was due to a set of batch processing failures. The impact was limited to the US region. Our engineers mitigated the issue by rolling out a fix.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nAffected customers were unable to generate and analyze their statistical aggregates for approximately the last 8-10 hours of ingested data.\n**Workarounds**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-30T23:11:17+00:00","modified":"2026-07-01T00:32:00+00:00","when":"2026-06-30T23:11:17+00:00","text":"**Summary**\nA subset of Google Security Operations (SecOps) customers experienced a data freshness issue affecting Statistical Search and Dashboards\n**Description**\nGoogle SecOps customers are experiencing a data freshness issue affecting Statistical Search and Dashboards for UDM data sources.\nThe impact is limited to the US region\nOur engineering team is actively implementing a mitigation. We do not have an ETA at this time.\nWe will provide an update by Tuesday, 2026-06-30 18:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nAffected customers are unable to generate and analyze their statistical aggregates for approximately the last 8-10 hours of ingested data.\n**Workarounds**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-06-30T19:58:56+00:00","modified":"2026-06-30T23:11:17+00:00","when":"2026-06-30T19:58:56+00:00","text":"**Summary**\nA subset of Google Security Operations (SecOps) customers experienced a data freshness issue affecting Statistical Search and Dashboards\n**Description**\nGoogle SecOps customers are experiencing a data freshness issue affecting Statistical Search and Dashboards for UDM data sources.\nThe impact is limited to the US region\nOur engineering team is actively implementing a mitigation. We do not have an ETA at this time.\nWe will provide an update by Tuesday, 2026-06-30 14:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nAffected customers are unable to generate and analyze their statistical aggregates for approximately the last 8-10 hours of ingested data.\n**Workarounds**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-07-01T00:32:00+00:00","modified":"2026-07-01T00:32:00+00:00","when":"2026-07-01T00:32:00+00:00","text":"**Summary**\nA subset of Google Security Operations (SecOps) customers experienced a data freshness issue affecting Statistical Search and Dashboards.\n**Description**\nThe issue with Google Security Operations (SecOps) has been mitigated for affected users as of Tuesday, 2026-06-30 17:11 PDT. Data freshness for Statistical Search and Dashboards has recovered.\nThe issue was due to a set of batch processing failures. The impact was limited to the US region. Our engineers mitigated the issue by rolling out a fix.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nAffected customers were unable to generate and analyze their statistical aggregates for approximately the last 8-10 hours of ingested data.\n**Workarounds**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/6DNffu87AZXHHLd4VSqi","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"3Ap7DLzNyx3wNBt9j6qo","number":"11556916914080043155","begin":"2026-06-26T18:27:00+00:00","created":"2026-06-26T20:49:02+00:00","end":"2026-06-26T22:34:00+00:00","modified":"2026-06-26T23:37:34+00:00","external_desc":"Some customers in asia-southeast1 region may be experiencing delay in ingesting specific 3rd party data sources.","updates":[{"created":"2026-06-26T23:34:11+00:00","modified":"2026-06-26T23:37:34+00:00","when":"2026-06-26T23:34:11+00:00","text":"**Summary**\nGoogle SecOps customers utilizing certain third-party feeds in asia-southeast1, australia-southeast1, me-west1, and southamerica-east1 may have experienced delays in log ingestion and security detections.\n**Description**\nThe issue affecting Google SecOps third-party log ingestion (such as PROOFPOINT_ON_DEMAND) has been resolved for all affected regions as of Friday, 2026-06-26 15:34 US/Pacific.\nOur engineering team mitigated the issue successfully and validated the service stability.\nWe thank you for your patience while we worked on resolving this issue.\n**Customer Symptoms**\nGoogle SecOps customers utilizing certain third-party feeds (such as PROOFPOINT_ON_DEMAND) in the affected regions may have observed delays in log ingestion and security detections.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-26T22:55:04+00:00","modified":"2026-06-26T23:34:11+00:00","when":"2026-06-26T22:55:04+00:00","text":"**Summary**\nGoogle SecOps customers utilizing certain third-party feeds in asia-southeast1, australia-southeast1, me-west1, and southamerica-east1 may have experienced delays in log ingestion and security detections\n**Description**\nOur engineering team has implemented a mitigation for the issue affecting Google SecOps third-party log ingestion (such as PROOFPOINT_ON_DEMAND) and is continuing to monitor the stability of the environment.\nWe will provide more information by Friday, 2026-06-26 17:00 PDT.\n**Customer Symptoms**\nGoogle SecOps customers utilizing certain third-party feeds (such as PROOFPOINT_ON_DEMAND) in the affected regions may have observed delays in log ingestion and security detections\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]},{"created":"2026-06-26T20:49:02+00:00","modified":"2026-06-26T22:55:04+00:00","when":"2026-06-26T20:49:02+00:00","text":"**Summary**\nSome customers in asia-southeast1 region may be experiencing delay in ingesting specific 3rd party data sources.\n**Description**\nWe are investigating an issue with Google SecOps related ingestion of third party feeds for few log types. This issue impacts all customers using 3rd party feeds in asia-southeast1 region.\nWe will provide more information by Friday, 2026-06-26 16:00 PDT.\n**Customer Symptoms**\nGoogle SecOps customers in asia-southeast1 region customers would experience delay in ingestion from 3rd Party feeds and security detections.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-06-26T23:34:11+00:00","modified":"2026-06-26T23:37:34+00:00","when":"2026-06-26T23:34:11+00:00","text":"**Summary**\nGoogle SecOps customers utilizing certain third-party feeds in asia-southeast1, australia-southeast1, me-west1, and southamerica-east1 may have experienced delays in log ingestion and security detections.\n**Description**\nThe issue affecting Google SecOps third-party log ingestion (such as PROOFPOINT_ON_DEMAND) has been resolved for all affected regions as of Friday, 2026-06-26 15:34 US/Pacific.\nOur engineering team mitigated the issue successfully and validated the service stability.\nWe thank you for your patience while we worked on resolving this issue.\n**Customer Symptoms**\nGoogle SecOps customers utilizing certain third-party feeds (such as PROOFPOINT_ON_DEMAND) in the affected regions may have observed delays in log ingestion and security detections.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/3Ap7DLzNyx3wNBt9j6qo","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]},{"id":"b5ziwVXEdKarRNnvwFK5","number":"3796991600264846336","begin":"2026-06-25T13:44:00+00:00","created":"2026-06-25T15:29:39+00:00","end":"2026-06-25T18:28:00+00:00","modified":"2026-06-25T18:38:36+00:00","external_desc":"Some Google SecOps SIEM customers in asia-southeast1 region may have experienced intermittent elevated latency and timeout errors in Search queries.","updates":[{"created":"2026-06-25T18:37:12+00:00","modified":"2026-06-25T18:37:14+00:00","when":"2026-06-25T18:37:12+00:00","text":"**Description:**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-06-25 11:28 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nCustomers may experience intermittent elevated latency and timeouts on Search queries.\n**Workaround:**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-25T16:25:23+00:00","modified":"2026-06-25T18:37:12+00:00","when":"2026-06-25T16:25:23+00:00","text":"**Description:**\nSome Google SecOps SIEM customers in the asia-southeast1 region may experience intermittent elevated latency and timeout errors in Search queries beginning on Thursday, 2026-06-25 06:44 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-06-25 11:30 PDT with details.\n**Symptoms:**\nCustomers may experience intermittent elevated latency and timeouts on Search queries.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"created":"2026-06-25T15:29:39+00:00","modified":"2026-06-25T16:25:23+00:00","when":"2026-06-25T15:29:39+00:00","text":"**Description:**\nWe are experiencing an issue with Google SecOps beginning at Thursday, 2026-06-25 06:44 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-06-25 09:30 PDT with current details.\n**Symptoms:**\nCustomers may experience intermittent elevated latency and timeouts on Search queries.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-06-25T18:37:12+00:00","modified":"2026-06-25T18:37:14+00:00","when":"2026-06-25T18:37:12+00:00","text":"**Description:**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-06-25 11:28 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nCustomers may experience intermittent elevated latency and timeouts on Search queries.\n**Workaround:**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/b5ziwVXEdKarRNnvwFK5","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"id":"YZqZSmkYNjDxNon5MPSG","number":"18292689784189832234","begin":"2026-06-25T05:26:00+00:00","created":"2026-06-25T07:13:11+00:00","end":"2026-06-25T08:56:00+00:00","modified":"2026-06-25T09:08:29+00:00","external_desc":"Google SecOps customers may experience higher latency and failures with dashboard and search queries for some data sources in asia-southeast1 region.","updates":[{"created":"2026-06-25T09:08:25+00:00","modified":"2026-06-25T09:08:29+00:00","when":"2026-06-25T09:08:25+00:00","text":"**Summary**\nGoogle SecOps customers might experience higher latency and failures with dashboard and search queries for some data sources in asia-southeast1 region.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-06-25 01:56 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers might observe elevated latency or timeouts when running dashboard and search queries. The impact is limited to the following data sources:\n- Dashboard - Soar Cases, Ingestion, Detections, IOC, Rules\n- Search - Soar Cases, Detections\n**Workaround**\nNo workaround since an issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-25T07:13:11+00:00","modified":"2026-06-25T09:08:25+00:00","when":"2026-06-25T07:13:11+00:00","text":"**Summary**\nGoogle SecOps customers may experience higher latency and failures with dashboard and search queries for some data sources in asia-southeast1 region.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Wednesday, 2026-06-24 at 22:26 PDT.\nOur engineering teams are actively working to identify the cause of the issue. We do not have any ETA at this moment and are continuing our investigation.\nWe will provide more information by Thursday, 2026-06-25 02:30 PDT.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may observe elevated latency or timeouts when running dashboard and search queries. The impact is limited to the following data sources:\n* Dashboard - Soar Cases, Ingestion, Detections, IOC, Rules\n* Search - Soar Cases, Detections\n**Workaround**\nThere is no workaround at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-06-25T09:08:25+00:00","modified":"2026-06-25T09:08:29+00:00","when":"2026-06-25T09:08:25+00:00","text":"**Summary**\nGoogle SecOps customers might experience higher latency and failures with dashboard and search queries for some data sources in asia-southeast1 region.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-06-25 01:56 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers might observe elevated latency or timeouts when running dashboard and search queries. The impact is limited to the following data sources:\n- Dashboard - Soar Cases, Ingestion, Detections, IOC, Rules\n- Search - Soar Cases, Detections\n**Workaround**\nNo workaround since an issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/YZqZSmkYNjDxNon5MPSG","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"id":"erxz91Lt8m8sDFds6qhH","number":"8927928138070857335","begin":"2026-06-24T21:09:00+00:00","created":"2026-06-24T22:50:24+00:00","end":"2026-06-25T01:17:00+00:00","modified":"2026-06-25T01:41:23+00:00","external_desc":"Google SecOps SIEM (Chronicle) customers in the asia-southeast1 region may experience search latencies, slower dashboard performance, and elevated error rates.","updates":[{"created":"2026-06-25T01:41:23+00:00","modified":"2026-06-25T01:41:24+00:00","when":"2026-06-25T01:41:23+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) customers in the asia-southeast1 region experienced search latencies, slower dashboard performance, and elevated error rates.\n**Description**\nThe issue affecting Google SecOps SIEM in the asia-southeast1 region has been resolved for all affected customers as of Wednesday, 2026-06-24 18:17 US/Pacific.\nOur engineering teams successfully mitigated the issue and validated the service stability.\nWe apologize for the inconvenience and thank you for your patience while we worked on resolving this issue.\n**Customer Symptoms**\nAffected customers in the asia-southeast1 region may have experienced slower query (search) execution times and slower dashboard performance. Additionally, rule evaluation failures occurred.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-24T23:46:30+00:00","modified":"2026-06-25T01:41:23+00:00","when":"2026-06-24T23:46:30+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) customers in the asia-southeast1 region may experience search latencies, slower dashboard performance, and elevated error rates.\n**Description**\nOur engineering teams are actively working to identify the cause of the issue. We do not have any ETA at this moment and are continuing our investigation.\nWe will provide another update by Wednesday, 2026-06-24 19:00 US/Pacific with the latest details.\n**Customer Symptoms**\nImpacted customers in the asia-southeast1 region will experience slower query (search) execution times, slower dashboard performance and delayed detection.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"created":"2026-06-24T22:50:24+00:00","modified":"2026-06-24T23:46:30+00:00","when":"2026-06-24T22:50:24+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) customers in the asia-southeast1 region may experience search latencies, slower dashboard performance, and elevated error rates.\n**Description**\nWe are investigating an issue affecting Google SecOps SIEM in the asia-southeast1 region beginning on Wednesday, 2026-06-24 14:09:00 US/Pacific.\nOur engineering teams are actively investigating the issue. We will provide another update by Wednesday, 2026-06-24 17:00 US/Pacific with the latest details.\n**Customer Symptoms**\nImpacted customers in the asia-southeast1 region will experience slower query (search) execution times, slower dashboard performance and delayed detection.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-06-25T01:41:23+00:00","modified":"2026-06-25T01:41:24+00:00","when":"2026-06-25T01:41:23+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) customers in the asia-southeast1 region experienced search latencies, slower dashboard performance, and elevated error rates.\n**Description**\nThe issue affecting Google SecOps SIEM in the asia-southeast1 region has been resolved for all affected customers as of Wednesday, 2026-06-24 18:17 US/Pacific.\nOur engineering teams successfully mitigated the issue and validated the service stability.\nWe apologize for the inconvenience and thank you for your patience while we worked on resolving this issue.\n**Customer Symptoms**\nAffected customers in the asia-southeast1 region may have experienced slower query (search) execution times and slower dashboard performance. Additionally, rule evaluation failures occurred.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/erxz91Lt8m8sDFds6qhH","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"id":"81WJDGtMhMuxYvHBAgJV","number":"15773312213188564476","begin":"2026-06-24T02:55:00+00:00","created":"2026-06-24T03:55:38+00:00","end":"2026-06-24T05:34:00+00:00","modified":"2026-06-24T06:01:49+00:00","external_desc":"Google SecOps SIEM (Chronicle) Europe multi-region customers are experiencing intermittent elevated latency and timeouts errors in Search and Dashboard.","updates":[{"created":"2026-06-24T06:01:32+00:00","modified":"2026-06-24T06:01:49+00:00","when":"2026-06-24T06:01:32+00:00","text":"**Title**\n[Mitigated] Some Google SecOps SIEM (Chronicle) customers across Europe Multi-region may have experienced intermittent elevated latency and timeout errors in Search and Dashboard.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2026-06-23 22:34 PDT.\nFrom preliminary analysis, the issue was triggered by an upgrade to the underlying file system. The upgrade included code changes that increased resource utilization and caused request throttling.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers may have experienced intermittent elevated latency and timeouts on Search and Dashboard queries.\n**Workaround**\nNone at this time as the issue stands mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-24T04:18:56+00:00","modified":"2026-06-24T06:01:32+00:00","when":"2026-06-24T04:18:56+00:00","text":"**Title**\nSome Google SecOps SIEM (Chronicle) customers across Europe multi-region may experience intermittent elevated latency and timeout errors in Search and Dashboard.\n**Description**\nWe are experiencing an issue with Google SecOps Search/Dashboard query performance beginning on Tuesday, 2026-06-23 19:55 PDT.\nOur engineering team has identified the issue and is currently working on a mitigation plan.\nWe will provide an update by Tuesday, 2026-06-23 23:00 PDT with current details.\n**Symptoms**\nCustomers may experience intermittent elevated latency and timeouts on Search and Dashboard queries.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"created":"2026-06-24T03:55:38+00:00","modified":"2026-06-24T04:18:56+00:00","when":"2026-06-24T03:55:38+00:00","text":"**Title**\nGoogle SecOps SIEM (Chronicle) Europe multi-region customers are experiencing intermittent elevated latency and timeouts errors in Search and Dashboard.\n**Description**\nWe are experiencing an issue with Search/Dashboard query performance, beginning on Tuesday, 2026-06-23 19:55 US/Pacific.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Tuesday, 2026-06-23 22:00 PDT with current details.\n**Symptoms**\nCustomers may experience intermittent elevated latency and timeouts on Search and Dashboard queries.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2026-06-24T06:01:32+00:00","modified":"2026-06-24T06:01:49+00:00","when":"2026-06-24T06:01:32+00:00","text":"**Title**\n[Mitigated] Some Google SecOps SIEM (Chronicle) customers across Europe Multi-region may have experienced intermittent elevated latency and timeout errors in Search and Dashboard.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2026-06-23 22:34 PDT.\nFrom preliminary analysis, the issue was triggered by an upgrade to the underlying file system. The upgrade included code changes that increased resource utilization and caused request throttling.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers may have experienced intermittent elevated latency and timeouts on Search and Dashboard queries.\n**Workaround**\nNone at this time as the issue stands mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/81WJDGtMhMuxYvHBAgJV","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"qewyV9CXtGxxYsd8USAA","number":"12014177557502665013","begin":"2026-06-23T12:00:00+00:00","created":"2026-06-23T19:22:40+00:00","end":"2026-06-24T00:24:00+00:00","modified":"2026-06-24T01:06:30+00:00","external_desc":"Google SecOps SIEM (Chronicle) US multi-region customers are experiencing intermittent elevated latency and timeouts errors in Search","updates":[{"created":"2026-06-24T01:06:30+00:00","modified":"2026-06-24T01:06:30+00:00","when":"2026-06-24T01:06:30+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) US multi-region customers were experiencing intermittent elevated latency and timeouts errors in Search.\n**Description**\nThe issue with Search Performance has been mitigated for all affected customers as of Tuesday, 2026-06-23 17:24 US/Pacific.\nFrom preliminary analysis, the issue was triggered by an upgrade to the underlying file system. The upgrade included code changes that increased resource utilization and caused request throttling.\nOur engineers mitigated the issue by directing traffic away from the affected nodes.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers were experiencing intermittent elevated latency and timeouts on search queries.\n**Workaround**\nNone as the issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-23T23:24:28+00:00","modified":"2026-06-24T01:06:30+00:00","when":"2026-06-23T23:24:28+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) US multi-region customers are experiencing intermittent elevated latency and timeouts errors in Search.\n**Description**\nWe are experiencing an issue with Search performance, beginning on Tuesday, 2026-06-23 05:00 US/Pacific.\nOur engineering team continues to investigate and has partially mitigated the issue while continuing to work on full mitigation for which we do not have an ETA at this point in time.\nWe will provide more information by Tuesday, 2026-06-23 18:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nCustomers are experiencing intermittent elevated latency and timeouts on search queries.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-06-23T21:16:43+00:00","modified":"2026-06-23T23:24:28+00:00","when":"2026-06-23T21:16:43+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) US multi-region customers are experiencing intermittent elevated latency and timeouts errors in Search.\n**Description**\nWe are experiencing an issue with Search performance, beginning on Tuesday, 2026-06-23 05:00 US/Pacific.\nOur engineering team continues to investigate the issue and is working on a mitigation strategy.\nWe will provide more information by Tuesday, 2026-06-23 16:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nCustomers are experiencing intermittent elevated latency and timeouts on search queries.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-06-23T19:22:40+00:00","modified":"2026-06-23T21:16:43+00:00","when":"2026-06-23T19:22:40+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) US multi-region customers are experiencing intermittent elevated latency and timeouts errors in Search\n**Description**\nWe are experiencing an issue with Search performance, beginning on Tuesday, 2026-06-23 05:00 US/Pacific.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Tuesday, 2026-06-23 14:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\n* Customers are experiencing intermittent elevated latency and timeouts on search queries.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-06-24T01:06:30+00:00","modified":"2026-06-24T01:06:30+00:00","when":"2026-06-24T01:06:30+00:00","text":"**Summary**\nGoogle SecOps SIEM (Chronicle) US multi-region customers were experiencing intermittent elevated latency and timeouts errors in Search.\n**Description**\nThe issue with Search Performance has been mitigated for all affected customers as of Tuesday, 2026-06-23 17:24 US/Pacific.\nFrom preliminary analysis, the issue was triggered by an upgrade to the underlying file system. The upgrade included code changes that increased resource utilization and caused request throttling.\nOur engineers mitigated the issue by directing traffic away from the affected nodes.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers were experiencing intermittent elevated latency and timeouts on search queries.\n**Workaround**\nNone as the issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/qewyV9CXtGxxYsd8USAA","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"C41KpHAqMuBwqL5HP4xq","number":"5871862947818414548","begin":"2026-06-23T06:00:00+00:00","created":"2026-06-23T15:38:57+00:00","end":"2026-06-23T16:35:00+00:00","modified":"2026-06-23T16:54:29+00:00","external_desc":"Some Google SecOps customers in Europe Multi-region may experience delays with data ingestion.","updates":[{"created":"2026-06-23T16:54:27+00:00","modified":"2026-06-23T16:54:29+00:00","when":"2026-06-23T16:54:27+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected customers as of Tuesday, 2026-06-23 09:35 US/Pacific .\nCustomers should experience normal ingestion performance.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nGoogle SecOps customers in Europe Multi-region may have experienced delays with data ingestion.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-23T15:38:57+00:00","modified":"2026-06-23T16:54:27+00:00","when":"2026-06-23T15:38:57+00:00","text":"**Description**\nWe are experiencing an issue with Google SecOps in Europe multi-region causing data ingestion delays for some customers, beginning at 2026-06-22 23:00 US/Pacific.\nOur engineering team is currently investigating the issue.\nWe will provide more information by Tuesday, 2026-06-23 12:00 US/Pacific with current details.\n**Symptoms**\nGoogle SecOps customers in Europe Multi-region may experience delays with data ingestion.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2026-06-23T16:54:27+00:00","modified":"2026-06-23T16:54:29+00:00","when":"2026-06-23T16:54:27+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected customers as of Tuesday, 2026-06-23 09:35 US/Pacific .\nCustomers should experience normal ingestion performance.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nGoogle SecOps customers in Europe Multi-region may have experienced delays with data ingestion.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/C41KpHAqMuBwqL5HP4xq","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"1BGoxBML63pgji1vJr2P","number":"14555221938203611441","begin":"2026-06-22T16:30:00+00:00","created":"2026-06-22T18:54:52+00:00","end":"2026-06-22T18:34:00+00:00","modified":"2026-06-22T18:56:13+00:00","external_desc":"Google SecOps customers may have experienced issues creating new feeds.","updates":[{"created":"2026-06-22T18:54:52+00:00","modified":"2026-06-22T18:56:13+00:00","when":"2026-06-22T18:54:52+00:00","text":"**Description:**\nBetween 09:30 and 11:34 PDT on 22 June 2026, Google SecOps customers may have experienced issues with creating new cloud storage bucket feeds.\nFrom preliminary analysis, the issue was caused due to request throttling.\nOur engineers mitigated the issue by increasing the quota for the affected services.\nWe thank you for your patience while we resolved the issue.\n**Customer Symptoms:**\nDuring the issue, customers may have experienced issues with creating new cloud storage bucket feeds.","status":"AVAILABLE","affected_locations":[]}],"most_recent_update":{"created":"2026-06-22T18:54:52+00:00","modified":"2026-06-22T18:56:13+00:00","when":"2026-06-22T18:54:52+00:00","text":"**Description:**\nBetween 09:30 and 11:34 PDT on 22 June 2026, Google SecOps customers may have experienced issues with creating new cloud storage bucket feeds.\nFrom preliminary analysis, the issue was caused due to request throttling.\nOur engineers mitigated the issue by increasing the quota for the affected services.\nWe thank you for your patience while we resolved the issue.\n**Customer Symptoms:**\nDuring the issue, customers may have experienced issues with creating new cloud storage bucket feeds.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/1BGoxBML63pgji1vJr2P","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"id":"s7gKCrq58c7Ei7PvbggE","number":"16541482985291092339","begin":"2026-06-15T07:39:00+00:00","created":"2026-06-15T09:20:04+00:00","end":"2026-06-15T11:30:00+00:00","modified":"2026-06-15T11:50:44+00:00","external_desc":"Google SecOps customers may have experienced higher detection latency, slower searches and dashboards in asia-southeast1","updates":[{"created":"2026-06-15T11:50:44+00:00","modified":"2026-06-15T11:50:44+00:00","when":"2026-06-15T11:50:44+00:00","text":"Google SecOps customers may have experienced higher detection latency, slower searches and dashboards in asia-southeast1\nThe issue with Google SecOps has been mitigated for all affected customers as of Monday, 2026-06-15 04:30 AM US/Pacific.\nDetection, search, and dashboard latencies are back to normal across the asia-southeast1 region.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis / Customer Symptoms** Customers in the impacted region may have observed failures and delays while accessing Google SecOps. Customers may have experienced latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround** This is the final notification.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-15T11:06:54+00:00","modified":"2026-06-15T11:50:44+00:00","when":"2026-06-15T11:06:54+00:00","text":"We are experiencing an issue with Google SecOps search, detections and dashboards beginning on Monday, 2026-06-15 00:39 PDT in the asia-southeast1\nOur engineering team is continuing to investigate the root cause and mitigation.\nWe will provide the next update by Monday, 2026-06-15 04:15 PDT\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms** Customers in the impacted region may observe failures and delays while accessing Google SecOps. Customers may experience latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"created":"2026-06-15T09:58:11+00:00","modified":"2026-06-15T11:06:54+00:00","when":"2026-06-15T09:58:11+00:00","text":"We are experiencing an issue with Google SecOps search, detections and dashboards beginning on Monday, 2026-06-15 00:39 PDT in the asia-southeast1\nOur engineering team is working on investigating the root cause and mitigation.\nWe will provide the next update by Monday, 2026-06-15 04:15 PDT\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms** Customers in the impacted region may observe failures and delays while accessing Google SecOps. Customers may experience latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"created":"2026-06-15T09:20:04+00:00","modified":"2026-06-15T09:58:11+00:00","when":"2026-06-15T09:20:04+00:00","text":"We are experiencing an issue with Google SecOps search, detections and dashboards beginning on Monday, 2026-06-15 00:39 PDT in the asia-southeast1\nOur engineering team is working on investigating the root cause and mitigation.\nWe will provide the next update by Monday, 2026-06-15 03:15 PDT\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms** Customers in the impacted region may observe failures and delays while accessing Google SecOps. Customers may experience latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-06-15T11:50:44+00:00","modified":"2026-06-15T11:50:44+00:00","when":"2026-06-15T11:50:44+00:00","text":"Google SecOps customers may have experienced higher detection latency, slower searches and dashboards in asia-southeast1\nThe issue with Google SecOps has been mitigated for all affected customers as of Monday, 2026-06-15 04:30 AM US/Pacific.\nDetection, search, and dashboard latencies are back to normal across the asia-southeast1 region.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis / Customer Symptoms** Customers in the impacted region may have observed failures and delays while accessing Google SecOps. Customers may have experienced latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround** This is the final notification.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/s7gKCrq58c7Ei7PvbggE","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"id":"nUTpstwj991RMaqQtNHu","number":"206580013413863598","begin":"2026-06-14T12:40:00+00:00","created":"2026-06-14T15:51:18+00:00","end":"2026-06-14T16:14:00+00:00","modified":"2026-06-14T19:54:49+00:00","external_desc":"Google SecOps customers are experiencing login and API request failures in multiple regions","updates":[{"created":"2026-06-14T19:52:22+00:00","modified":"2026-06-14T19:54:49+00:00","when":"2026-06-14T19:52:22+00:00","text":"**Summary**\n[Mitigated] Google SecOps customers experienced login and API request failures in multi-region:us\n**Description**\nThe issue with Google SecOps has been resolved for all affected customers as of Sunday, 2026-06-14 12:23 PDT.\nA recent software update caused increased intermittent login and API request failures. Our engineering team has mitigated the issue by reverting the update to a previous stable version.\nUpon further investigation, our engineers confirmed the issue was limited to the US multiregion and not a global impact, and was between 05:40 PDT and 09:14 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers in the US multiregion may have experienced an increased intermittent login and API request failures.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-14T17:12:53+00:00","modified":"2026-06-14T19:52:22+00:00","when":"2026-06-14T17:12:53+00:00","text":"**Summary**\n[Mitigated] Google SecOps customers experienced login and API request failures in multiple regions\n**Description**\nThe issue with Google SecOps has been mitigated for all affected customers as of Sunday, 2026-06-14 09:14 PDT.\nOur engineering team continues to monitor the service to ensure ongoing stability.\nWe will provide more information by Sunday, 2026-06-14 13:30 PDT.\n**Symptoms**\nCustomers across multiple regions may have experienced an increased intermittent login and API request failures.\n**Workaround**\nThe issue is now mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-06-14T16:33:02+00:00","modified":"2026-06-14T17:12:53+00:00","when":"2026-06-14T16:33:02+00:00","text":"**Description**\nMitigation work is still underway by our engineering team.\nPreliminary data indicates that the current mitigation efforts are proceeding as expected. Our engineering team remains focused on implementing these measures and monitoring the environment to ensure continued service stability.\nWe will provide more information by Sunday, 2026-06-14 10:30 PDT.\n**Symptoms**\nCustomers across multiple regions may have experienced an increased intermittent login and API request failures.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-06-14T15:51:18+00:00","modified":"2026-06-14T16:33:02+00:00","when":"2026-06-14T15:51:18+00:00","text":"**Description**\nWe are investigating an issue with Google SecOps where some customers may experience intermittent errors in login and api requests beginning on Sunday, 2026-06-14 04:12PDT.\nOur engineering team is working to identify a mitigation strategy.\nWe do not have an ETA for mitigation at this time.\nWe will provide more information by Sunday, 2026-06-14 09:30 PDT.\n**Symptoms**\nCustomers across multiple regions may experience an increased intermittent login and API request failures when making API requests\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-06-14T19:52:22+00:00","modified":"2026-06-14T19:54:49+00:00","when":"2026-06-14T19:52:22+00:00","text":"**Summary**\n[Mitigated] Google SecOps customers experienced login and API request failures in multi-region:us\n**Description**\nThe issue with Google SecOps has been resolved for all affected customers as of Sunday, 2026-06-14 12:23 PDT.\nA recent software update caused increased intermittent login and API request failures. Our engineering team has mitigated the issue by reverting the update to a previous stable version.\nUpon further investigation, our engineers confirmed the issue was limited to the US multiregion and not a global impact, and was between 05:40 PDT and 09:14 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers in the US multiregion may have experienced an increased intermittent login and API request failures.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/nUTpstwj991RMaqQtNHu","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"4MKVsHCjPCKpgRVsecBH","number":"2058713287965154939","begin":"2026-06-10T15:15:00+00:00","created":"2026-06-10T16:51:45+00:00","end":"2026-06-10T17:48:00+00:00","modified":"2026-06-10T18:25:27+00:00","external_desc":"Google SecOps customers are experiencing increased query latency in Dashboards in asia-southeast1","updates":[{"created":"2026-06-10T18:25:25+00:00","modified":"2026-06-10T18:25:27+00:00","when":"2026-06-10T18:25:25+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected customers as of Wednesday, 2026-06-10 10:48 AM PDT US/Pacific.\nThe issue was caused by an intended down-scaling of backend compute resources in the region based on the resource utilization, which resulted in query latencies and failures. Our engineers have mitigated the issue by scaling up and restoring the necessary resources.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers experienced errors or high latencies while loading their dashboards in asia-southeast1 for IngestionMetrics, SOAR Cases, SOAR Case History, Detections and DataTables data sources.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-10T16:51:45+00:00","modified":"2026-06-10T18:25:25+00:00","when":"2026-06-10T16:51:45+00:00","text":"**Description**\nGoogle SecOps is currently experiencing increased query latency affecting Dashboards for the following data sources: IngestionMetrics, SOAR Cases, SOAR Case History, Detections, and DataTables. Customers using HealthHub may also observe similar performance impacts.\nOur engineering team has identified the issue and mitigation is in progress.\nWe will provide more information by Wednesday, 2026-06-10 13:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may experience errors or high latencies while loading their dashboards in asia-southeast1 for IngestionMetrics, SOAR Cases, SOAR Case History, Detections and DataTables data sources.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]}],"most_recent_update":{"created":"2026-06-10T18:25:25+00:00","modified":"2026-06-10T18:25:27+00:00","when":"2026-06-10T18:25:25+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected customers as of Wednesday, 2026-06-10 10:48 AM PDT US/Pacific.\nThe issue was caused by an intended down-scaling of backend compute resources in the region based on the resource utilization, which resulted in query latencies and failures. Our engineers have mitigated the issue by scaling up and restoring the necessary resources.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers experienced errors or high latencies while loading their dashboards in asia-southeast1 for IngestionMetrics, SOAR Cases, SOAR Case History, Detections and DataTables data sources.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/4MKVsHCjPCKpgRVsecBH","currently_affected_locations":[],"previously_affected_locations":[{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"}]},{"id":"DYQMBywi5LxShTMrVRfy","number":"9333613990717138111","begin":"2026-06-08T15:11:00+00:00","created":"2026-06-08T21:31:09+00:00","end":"2026-06-09T07:46:00+00:00","modified":"2026-06-10T16:03:59+00:00","external_desc":"Chronicle Security Operations customers are experiencing delay in processing a subset of Emerging Threat rules.","updates":[{"created":"2026-06-10T16:03:29+00:00","modified":"2026-06-10T16:03:59+00:00","when":"2026-06-10T16:03:29+00:00","text":"**Summary**\nChronicle Security Operations customers experienced a delay in processing a subset of Emerging Threat rules.\n**Description**\nThe issue with Google Security Operations (SecOps) has been mitigated for all affected users as of Tuesday, 2026-06-09 00:46 PDT and initiated reprocessing of affected rules at Tuesday, 2026-06-09 09:00 PDT.\nThis reprocessing will cover the last 14 days of detection coverage for affected rules. A small subset of affected rules will be reprocessed beyond 14 days.\nWe estimate reprocessing will complete by June 14 at the latest.\nThe issue was due to recent software update. Our engineers have mitigated the issue by rolling out a fix.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nAffected customers may have experienced delay in processing a subset of Emerging Threats rules.\n**Workaround**\nThe issue is mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-09T20:43:52+00:00","modified":"2026-06-10T16:03:29+00:00","when":"2026-06-09T20:43:52+00:00","text":"**Summary**\nChronicle Security Operations customers experienced a delay in processing a subset of Emerging Threat rules.\n**Description**\nWe are experiencing an issue with a subset of Emerging Threat detection within Google Security Operations (SecOps).\nOur engineering team has mitigated the issue as of Tuesday, 2026-06-09 00:46 PDT, and initiated reprocessing of affected rules at Tuesday, 2026-06-09 09:00 PDT.\nThis reprocessing will cover the last 14 days of detection coverage for affected rules. A small subset of affected rules will be reprocessed beyond 14 days.\nWe will provide target reprocessing times update by Wednesday, 2026-06-10 10:00 PDT.\n**Customer Symptoms**\nAffected customers may have experienced delay in processing a subset of Emerging Threats rules.\n**Workaround**\nThe issue is mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-06-08T23:26:25+00:00","modified":"2026-06-09T20:43:52+00:00","when":"2026-06-08T23:26:25+00:00","text":"**Summary**\nChronicle Security Operations customers are experiencing delay in processing a subset of Emerging Threat rules.\n**Description**\nWe are experiencing an issue with a subset of Emerging Threat detection within Chronicle Security Operations.\nOur engineering team is actively implementing the mitigation. We are targeting initial mitigation to complete by Tuesday, 2026-06-09 00:00 PDT. We will initiate reprocessing of affected rules Tuesday, 2026-06-09 09:00 PDT. This reprocessing will cover the last 14 days of detection coverage. A small subset of affected rules will be reprocessed beyond 14 days.\nWe will provide more information by Tuesday, 2026-06-09 10:00 PDT.\n**Customer Symptoms**\nAffected customers are experiencing delay in processing a subset of Emerging Threats rules.\n**Workaround**\nNone at the time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-06-08T21:31:09+00:00","modified":"2026-06-08T23:26:25+00:00","when":"2026-06-08T21:31:09+00:00","text":"**Summary**\nChronicle Security Operations customers are experiencing delay in processing a subset of Emerging Threat rules.\n**Description**\nWe are experiencing an issue with a subset of Emerging Threat detection within Chronicle Security Operations.\nOur engineering team is actively implementing the mitigation. We do not have ETA at this point.\nWe will provide more information by Monday, 2026-06-08 16:30 PDT.\n**Customer Symptoms**\nAffected customers are experiencing delay in processing a subset of Emerging Threats rules.\n**Workaround**\nNone at the time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-06-10T16:03:29+00:00","modified":"2026-06-10T16:03:59+00:00","when":"2026-06-10T16:03:29+00:00","text":"**Summary**\nChronicle Security Operations customers experienced a delay in processing a subset of Emerging Threat rules.\n**Description**\nThe issue with Google Security Operations (SecOps) has been mitigated for all affected users as of Tuesday, 2026-06-09 00:46 PDT and initiated reprocessing of affected rules at Tuesday, 2026-06-09 09:00 PDT.\nThis reprocessing will cover the last 14 days of detection coverage for affected rules. A small subset of affected rules will be reprocessed beyond 14 days.\nWe estimate reprocessing will complete by June 14 at the latest.\nThe issue was due to recent software update. Our engineers have mitigated the issue by rolling out a fix.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nAffected customers may have experienced delay in processing a subset of Emerging Threats rules.\n**Workaround**\nThe issue is mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/DYQMBywi5LxShTMrVRfy","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Taiwan (asia-east1)","id":"asia-east1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Seoul (asia-northeast3)","id":"asia-northeast3"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"id":"YVJoGgqaiYzU3SLHyGzN","number":"2491968328539309445","begin":"2026-06-06T23:27:00+00:00","created":"2026-06-07T02:17:04+00:00","end":"2026-06-07T02:29:00+00:00","modified":"2026-06-07T04:03:43+00:00","external_desc":"[Mitigated] Mandiant Threat Defense (formerly Mandiant Hunt) and Mandiant Managed Defense customers with Trellix technologies may have experienced delayed alert triage and investigation.","updates":[{"created":"2026-06-07T03:59:42+00:00","modified":"2026-06-07T04:03:43+00:00","when":"2026-06-07T03:59:42+00:00","text":"**Description**\nThe issue with Mandiant Threat Defense and Mandiant Managed Defense processing of Trellix alerts has been resolved for all affected customers as of Saturday, 2026-06-06 19:29 PDT\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nA high volume of alerts from Trellix technologies caused a processing backlog. This issue may have caused investigation reports to be delayed.\n**Workaround**\nNo workaround is required, as the issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-07T02:17:04+00:00","modified":"2026-06-07T04:03:11+00:00","when":"2026-06-07T02:17:04+00:00","text":"**Description**\nWe are experiencing an issue with Mandiant Threat Defense and Mandiant Managed Defense beginning on Saturday, 2026-06-06 16:27 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Saturday, 2026-06-06 22:15 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nAn internal alert processing issue is preventing Mandiant analysts from reviewing alerts from Trellix technologies. This issue may cause investigation reports to be delayed.\n**Workaround**\nNone at this time","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-06-07T03:59:42+00:00","modified":"2026-06-07T04:03:43+00:00","when":"2026-06-07T03:59:42+00:00","text":"**Description**\nThe issue with Mandiant Threat Defense and Mandiant Managed Defense processing of Trellix alerts has been resolved for all affected customers as of Saturday, 2026-06-06 19:29 PDT\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nA high volume of alerts from Trellix technologies caused a processing backlog. This issue may have caused investigation reports to be delayed.\n**Workaround**\nNo workaround is required, as the issue has been mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"zall","service_name":"Multiple Products","affected_products":[{"title":"Mandiant Hunt","id":"uomxopvCRv8y7bvrA1tK"},{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/YVJoGgqaiYzU3SLHyGzN","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"UZFxaJUTTSsT4TTddg4e","number":"4970572970179567733","begin":"2026-06-04T05:14:00+00:00","created":"2026-06-04T09:17:45+00:00","end":"2026-06-04T10:59:00+00:00","modified":"2026-06-04T11:35:57+00:00","external_desc":"Google SecOps SIEM customers in the US region may be experiencing delays in data ingestion for cloud-based v2 feeds.","updates":[{"created":"2026-06-04T11:35:51+00:00","modified":"2026-06-04T11:35:57+00:00","when":"2026-06-04T11:35:51+00:00","text":"**Summary**\n[Mitigated] Google SecOps SIEM customers in the US region may have experienced delays in data ingestion for cloud-based v2 feeds.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-06-04 03:59 PDT.\nFrom preliminary analysis, the issue was due to an infrastructure capacity issue.\nOur engineers mitigated the issue by scaling up processing resources.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have experienced delays in data ingestion in the US region for cloud-based v2 feeds.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-06-04T10:05:24+00:00","modified":"2026-06-04T11:35:51+00:00","when":"2026-06-04T10:05:24+00:00","text":"**Description**\nMitigation work is still underway by our engineering team.\nCurrent data indicates a significant improvement in processing throughput. The pending data backlog is steadily decreasing, and we are observing improvements in end-to-end ingestion latency for impacted customers.\nWe do not have a mitigation ETA at this time.\nWe continue to monitor the situation closely to ensure that the recovery remains stable and that all pending data is processed efficiently.\nWe will provide more information by Thursday, 2026-06-04 04:30 PDT with current details.\n**Customer Symptoms**\nCustomers may be experiencing delays in data ingestion in the US region for cloud-based v2 feeds.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-06-04T09:17:45+00:00","modified":"2026-06-04T10:05:24+00:00","when":"2026-06-04T09:17:45+00:00","text":"**Description**\nWe are experiencing an issue with Google SecOps in the US region beginning on Wednesday, 2026-06-03 22:14 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-06-04 03:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nCustomers may be experiencing delays in data ingestion in the US region for cloud-based v2 feeds.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-06-04T11:35:51+00:00","modified":"2026-06-04T11:35:57+00:00","when":"2026-06-04T11:35:51+00:00","text":"**Summary**\n[Mitigated] Google SecOps SIEM customers in the US region may have experienced delays in data ingestion for cloud-based v2 feeds.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-06-04 03:59 PDT.\nFrom preliminary analysis, the issue was due to an infrastructure capacity issue.\nOur engineers mitigated the issue by scaling up processing resources.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have experienced delays in data ingestion in the US region for cloud-based v2 feeds.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/UZFxaJUTTSsT4TTddg4e","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"cSxDAnszXHrxJNsSrT1u","number":"14122822678232853557","begin":"2026-05-20T21:58:00+00:00","created":"2026-05-21T00:03:25+00:00","end":"2026-05-21T05:29:00+00:00","modified":"2026-05-21T05:54:50+00:00","external_desc":"Mandiant Threat Defense and Mandiant Managed Defense customers may be experiencing delayed alert triage and investigation.","updates":[{"created":"2026-05-21T05:54:50+00:00","modified":"2026-05-21T05:54:50+00:00","when":"2026-05-21T05:54:50+00:00","text":"**Summary**\nMandiant Threat Defense and Mandiant Managed Defense customers may have experienced delayed alert triage and investigation.\n**Description**\nThe issue with Mandiant Threat Defense and Mandiant Managed Defense has been mitigated as of Wednesday, 2026-05-20 22:29 US/Pacific.\nThe issue was caused by excessively large detections from a third-party vendor signature that consumed processing resources and slowed the processing of other detections.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nAn internal alert processing issue delayed Mandiant analysts from triaging and investigating detections. Data ingestion from security devices was not impacted. This issue may have caused investigation reports to be delayed.\n**Workaround**\nThe issue has been mitigated and the backlog of detections has been processed.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-05-21T03:30:35+00:00","modified":"2026-05-21T05:54:50+00:00","when":"2026-05-21T03:30:35+00:00","text":"**Summary**\nMandiant Threat Defense and Mandiant Managed Defense customers may be experiencing delayed alert triage and investigation.\n**Description**\nWe are experiencing an issue with Mandiant Threat Defense and Mandiant Managed Defense beginning on Wednesday, 2026-05-20 14:58 PDT.\nOur engineering team continues to investigate the issue. We are partially mitigating the issue by slowly clearing the backlog but newly ingested alerts will continue to be delayed.\nWe will provide an update by Wednesday, 2026-05-20 23:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nAn internal alert processing issue is preventing Mandiant analysts from reviewing alerts. Data ingestion from security devices is not impacted. This issue may cause investigation reports to be delayed.\n**Workaround**\nNone at this time","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T00:03:25+00:00","modified":"2026-05-21T03:30:35+00:00","when":"2026-05-21T00:03:25+00:00","text":"**Summary**\nMandiant Threat Defense and Mandiant Managed Defense customers may be experiencing delayed alert triage and investigation.\n**Description**\nWe are experiencing an issue with Mandiant Threat Defense and Mandiant Managed Defense beginning on Wednesday, 2026-05-20 14:58 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2026-05-20 20:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nAn internal alert processing issue is preventing Mandiant analysts from reviewing alerts. Data ingestion from security devices is not impacted. This issue may cause investigation reports to be delayed.\n**Workaround**\nNone at this time","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-05-21T05:54:50+00:00","modified":"2026-05-21T05:54:50+00:00","when":"2026-05-21T05:54:50+00:00","text":"**Summary**\nMandiant Threat Defense and Mandiant Managed Defense customers may have experienced delayed alert triage and investigation.\n**Description**\nThe issue with Mandiant Threat Defense and Mandiant Managed Defense has been mitigated as of Wednesday, 2026-05-20 22:29 US/Pacific.\nThe issue was caused by excessively large detections from a third-party vendor signature that consumed processing resources and slowed the processing of other detections.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nAn internal alert processing issue delayed Mandiant analysts from triaging and investigating detections. Data ingestion from security devices was not impacted. This issue may have caused investigation reports to be delayed.\n**Workaround**\nThe issue has been mitigated and the backlog of detections has been processed.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"zall","service_name":"Multiple Products","affected_products":[{"title":"Mandiant Hunt","id":"uomxopvCRv8y7bvrA1tK"},{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/cSxDAnszXHrxJNsSrT1u","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"GYaJKengxpb4yXrUzfR3","number":"4528407307993406354","begin":"2026-05-19T08:55:00+00:00","created":"2026-05-21T01:42:30+00:00","end":"2026-05-22T13:00:00+00:00","modified":"2026-05-22T13:31:34+00:00","external_desc":"Google SecOps had experienced pipeline delays.","updates":[{"created":"2026-05-22T13:31:33+00:00","modified":"2026-05-22T13:31:34+00:00","when":"2026-05-22T13:31:33+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2026-05-22 06:00 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers might have experienced delays in the event normalization pipeline, leading to delayed detections and search results.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-05-22T01:01:16+00:00","modified":"2026-05-22T13:31:33+00:00","when":"2026-05-22T01:01:16+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state.\nOur engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Friday, 2026-05-22 09:30 PDT with current details.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T22:27:45+00:00","modified":"2026-05-22T01:01:16+00:00","when":"2026-05-21T22:27:45+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state.\nOur engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 18:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T19:42:49+00:00","modified":"2026-05-21T22:27:45+00:00","when":"2026-05-21T19:42:49+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 15:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T16:02:17+00:00","modified":"2026-05-21T19:42:49+00:00","when":"2026-05-21T16:02:17+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 13:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T12:55:20+00:00","modified":"2026-05-21T16:02:17+00:00","when":"2026-05-21T12:55:20+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 10:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T10:57:04+00:00","modified":"2026-05-21T12:55:20+00:00","when":"2026-05-21T10:57:04+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 06:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T07:27:48+00:00","modified":"2026-05-21T10:57:04+00:00","when":"2026-05-21T07:27:48+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering team continues to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 04:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T03:25:09+00:00","modified":"2026-05-21T07:27:48+00:00","when":"2026-05-21T03:25:09+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering continue to actively work through the normalization backlog and have made significant progress in burning it down. We do not have an ETA at the moment for completion.\nWe will provide an update by Thursday, 2026-05-21 00:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers may have experienced delays in the event normalization pipeline, leading to delayed detections and search results. Full restoration of these services is expected as the remaining backlog is processed.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-21T01:42:30+00:00","modified":"2026-05-21T03:25:09+00:00","when":"2026-05-21T01:42:30+00:00","text":"**Summary**\nGoogle SecOps had experienced pipeline delays.\n**Description**\nBetween Tuesday, 2026-05-19 01:55 PDT to Wednesday, 2026-05-20 16:37 PDT customers in multiregion/us might have experienced pipeline delays.\nOur internal telemetry shows that the Live data processing operations have returned to normal state. Our engineering team is currently working through a backlog of normalized events. We do not have an ETA at the moment for backlog completion.\nWe will provide an update by Wednesday, 2026-05-20 20:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nImpacted customers might have experienced delays in the event normalization pipeline which results in delayed detections and freshness delays in search. These should return to normal operation.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-05-22T13:31:33+00:00","modified":"2026-05-22T13:31:34+00:00","when":"2026-05-22T13:31:33+00:00","text":"**Summary**\n[Mitigated] Google SecOps had experienced pipeline delays.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2026-05-22 06:00 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers might have experienced delays in the event normalization pipeline, leading to delayed detections and search results.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/GYaJKengxpb4yXrUzfR3","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"hj3bwMturppMQAqKP4Yx","number":"3242326704746201095","begin":"2026-05-08T00:00:00+00:00","created":"2026-05-08T01:28:30+00:00","end":"2026-05-08T02:25:00+00:00","modified":"2026-05-08T03:28:31+00:00","external_desc":"Google SecOps customers may be experiencing higher detection latency, slower searches and dashboards","updates":[{"created":"2026-05-08T03:27:57+00:00","modified":"2026-05-08T03:28:31+00:00","when":"2026-05-08T03:27:57+00:00","text":"**Summary**\nGoogle SecOps customers may have experienced higher detection latency, slower searches and dashboards in US multiregion.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-05-07 19:25 PDT.\nFrom preliminary analysis, the issue was triggered by a recent software update to our storage management service causing elevated query latency and timeouts for Google SecOps database operations, resulting in delays for security detections, searches, and dashboard updates.\nOur engineers mitigated the issue by rolling back the software update change.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers in the impacted regions may have observed failures and delays while accessing Google SecOps. Customers may have experienced latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround**\nThis incident is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-05-08T01:28:30+00:00","modified":"2026-05-08T03:27:57+00:00","when":"2026-05-08T01:28:30+00:00","text":"**Summary**\nGoogle SecOps customers may be experiencing higher detection latency, slower searches and dashboards in US multiregion.\n**Description**\nWe are experiencing an issue with Google SecOps database operations beginning on Thursday, 2026-05-07 17:00 PDT in the US multiregion.\nOur engineering team has identified the issue and we are working to resolve it.\nWe will provide the next update by Thursday, 2026-05-07 21:00 PDT\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nCustomers in the impacted regions may observe failures and delays while accessing Google SecOps. Customers may experience latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-05-08T03:27:57+00:00","modified":"2026-05-08T03:28:31+00:00","when":"2026-05-08T03:27:57+00:00","text":"**Summary**\nGoogle SecOps customers may have experienced higher detection latency, slower searches and dashboards in US multiregion.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-05-07 19:25 PDT.\nFrom preliminary analysis, the issue was triggered by a recent software update to our storage management service causing elevated query latency and timeouts for Google SecOps database operations, resulting in delays for security detections, searches, and dashboard updates.\nOur engineers mitigated the issue by rolling back the software update change.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers in the impacted regions may have observed failures and delays while accessing Google SecOps. Customers may have experienced latency processing security detections as well as slower than normal searches and dashboard operations.\n**Workaround**\nThis incident is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/hj3bwMturppMQAqKP4Yx","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"RJNFGJJXrnXvxMmM5B7t","number":"15157661326401602270","begin":"2026-05-06T20:11:00+00:00","created":"2026-05-06T20:14:06+00:00","end":"2026-05-08T18:32:00+00:00","modified":"2026-05-08T18:51:15+00:00","external_desc":"Google SecOps customers are experiencing increased latency when performing Entity Context Graph queries.","updates":[{"created":"2026-05-08T18:50:44+00:00","modified":"2026-05-08T18:51:15+00:00","when":"2026-05-08T18:50:44+00:00","text":"**Title:**\nGoogle SecOps customers were experiencing significant delays in Curated Rules that reference Entity Context Graph data.\n**Description:**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2026-05-08 11:32 PDT.\nUsers may continue to see late-arriving detections for re-processed events. ETA for reprocessing completion: May 15, 2026.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nGoogle SecOps customers experienced significant delays in Curated Rules that referenced Entity Context Graph data, this caused delayed detections. These Rules accounted for approx 3% of all Curated Rules in SecOps. There were no delays in Customer Authored Rules.\n**Workaround:**\nThe issue is mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-05-07T23:57:10+00:00","modified":"2026-05-08T18:50:44+00:00","when":"2026-05-07T23:57:10+00:00","text":"**Title:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data.\n**Description:**\nMitigation work is currently underway by our engineering team.\nWe are in a partially recovered state as we have increased resources to mitigate affected customers. We do not have an ETA for full mitigation at this point.\nWe will provide more information by Friday, 2026-05-08 12:00 PDT.\n**Symptoms:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data, this will cause delayed detections. These Rules account for approx 3% of all Curated Rules in SecOps. There are no delays in Customer Authored Rules.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-07T21:52:36+00:00","modified":"2026-05-07T23:57:10+00:00","when":"2026-05-07T21:52:36+00:00","text":"**Title:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data.\n**Description:**\nMitigation work is currently underway by our engineering team.\nWe estimate that approximately 50% of affected customers are currently mitigated. We do not have an ETA for full mitigation at this point.\nWe will provide more information by Thursday, 2026-05-07 17:00 PDT.\n**Symptoms:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data, this will cause delayed detections. These Rules account for approx 3% of all Curated Rules in SecOps. There are no delays in Customer Authored Rules.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-07T18:58:43+00:00","modified":"2026-05-07T21:52:36+00:00","when":"2026-05-07T18:58:43+00:00","text":"**Title:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data.\n**Description:**\nMitigation work is currently underway by our engineering team.\nWe estimate that approximately 50% of affected customers are currently mitigated. We do not have an ETA for full mitigation at this point.\nWe will provide more information by Thursday, 2026-05-07 15:00 PDT.\n**Symptoms:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data, this will cause delayed detections. These Rules account for approx 3% of all Curated Rules in SecOps. There are no delays in Customer Authored Rules.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-07T15:49:28+00:00","modified":"2026-05-07T18:58:43+00:00","when":"2026-05-07T15:49:28+00:00","text":"**Title:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data.\n**Description:**\nMitigation work is currently underway by our engineering team.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Thursday, 2026-05-07 12:00 PDT.\n**Symptoms:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data, this will cause delayed detections. These Rules account for approx 3% of all Curated Rules in SecOps. There are no delays in Customer Authored Rules.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-05-07T01:13:49+00:00","modified":"2026-05-07T15:49:28+00:00","when":"2026-05-07T01:13:49+00:00","text":"**Title:**\nGoogle SecOps customers are experiencing increased latency when performing Entity Context Graph queries.\n**Description:**\nMitigation work is currently underway by our engineering team.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Thursday, 2026-05-07 09:00 PDT.\n**Symptoms:**\nGoogle SecOps customers are experiencing significant delays in Curated Rules that reference Entity Context Graph data, this will cause delayed detections. These Rules account for approx 3% of all Curated Rules in SecOps. There are no delays in Customer Authored Rules. Previous latency delays when performing Entity Context Graph queries for search and dashboard queries have been resolved.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-05-06T21:25:58+00:00","modified":"2026-05-07T01:13:49+00:00","when":"2026-05-06T21:25:58+00:00","text":"**Title:**\nGoogle SecOps customers are experiencing increased latency when performing Entity Context Graph queries\n**Description:**\nOur engineering team continues to investigate the issue.\nWe will provide more information by Wednesday, 2026-05-06 17:30 US/Pacific with current details.\n**Symptoms:**\nGoogle SecOps customers are experiencing increased latency when performing Entity Context Graph queries. This is causing degraded performance of search and dashboard queries referencing this data.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"created":"2026-05-06T20:14:06+00:00","modified":"2026-05-06T21:25:58+00:00","when":"2026-05-06T20:14:06+00:00","text":"**Description**\nWe are experiencing an issue with Google SecOps.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Wednesday, 2026-05-06 14:30 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nGoogle SecOps customers are experiencing increased latency when performing Entity Context Graph queries. This is causing degraded performance of search and dashboard queries referencing this data.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-05-08T18:50:44+00:00","modified":"2026-05-08T18:51:15+00:00","when":"2026-05-08T18:50:44+00:00","text":"**Title:**\nGoogle SecOps customers were experiencing significant delays in Curated Rules that reference Entity Context Graph data.\n**Description:**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2026-05-08 11:32 PDT.\nUsers may continue to see late-arriving detections for re-processed events. ETA for reprocessing completion: May 15, 2026.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nGoogle SecOps customers experienced significant delays in Curated Rules that referenced Entity Context Graph data, this caused delayed detections. These Rules accounted for approx 3% of all Curated Rules in SecOps. There were no delays in Customer Authored Rules.\n**Workaround:**\nThe issue is mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/RJNFGJJXrnXvxMmM5B7t","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"Juaq1GYVZ8qeMd64bkS1","number":"9592558095311623967","begin":"2026-04-30T20:15:00+00:00","created":"2026-04-30T21:56:16+00:00","end":"2026-04-30T21:35:00+00:00","modified":"2026-04-30T22:28:55+00:00","external_desc":"We have mitigated an issue with Google SecOps that affected multiregion/us.","updates":[{"created":"2026-04-30T22:28:55+00:00","modified":"2026-04-30T22:28:55+00:00","when":"2026-04-30T22:28:55+00:00","text":"## Description\nThe issue with Google SecOps has been mitigated for all affected users as of Thursday, 2026-04-30 14:35 PDT.\nThe compiler component used by Search received an unexpected burst of traffic, and began pushing back on regular traffic. The system recovered automatically as the burst resolved.\nWe have taken steps to ensure that the system has sufficient capacity to handle similar bursts in the future.\nWe thank you for your patience while we worked on resolving the issue.\n## Symptoms\nCustomers in the US multiregion may have experienced high error rates and failures when performing searches or accessing dashboards within Google SecOps.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-30T21:56:16+00:00","modified":"2026-04-30T22:28:55+00:00","when":"2026-04-30T21:56:16+00:00","text":"## Description\nWe are experiencing an issue with Google SecOps beginning on Thursday, 2026-04-30 13:15 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-04-30 15:15 PDT with current details.\nWe apologize to all who are affected by the disruption.\n## Symptoms\nCustomers in the US multiregion may experience high error rates and failures when performing searches or accessing dashboards within Chronicle.\n## Workaround\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-04-30T22:28:55+00:00","modified":"2026-04-30T22:28:55+00:00","when":"2026-04-30T22:28:55+00:00","text":"## Description\nThe issue with Google SecOps has been mitigated for all affected users as of Thursday, 2026-04-30 14:35 PDT.\nThe compiler component used by Search received an unexpected burst of traffic, and began pushing back on regular traffic. The system recovered automatically as the burst resolved.\nWe have taken steps to ensure that the system has sufficient capacity to handle similar bursts in the future.\nWe thank you for your patience while we worked on resolving the issue.\n## Symptoms\nCustomers in the US multiregion may have experienced high error rates and failures when performing searches or accessing dashboards within Google SecOps.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/Juaq1GYVZ8qeMd64bkS1","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"S19EmQLF3Y6nrCfXnmo1","number":"10375461989733712689","begin":"2026-04-16T23:56:00+00:00","created":"2026-04-17T04:19:23+00:00","end":"2026-04-17T05:26:00+00:00","modified":"2026-04-17T05:35:44+00:00","external_desc":"Ingestion delays for Google SecOps Globally.","updates":[{"created":"2026-04-17T05:35:25+00:00","modified":"2026-04-17T05:35:44+00:00","when":"2026-04-17T05:35:25+00:00","text":"**Summary**\n[Mitigated] Ingestion delays for Google SecOps leveraging version 1 based feeds Globally.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-04-16 22:26 PDT.\nFrom preliminary analysis, the issue occurred due to the internal system used to fetch data. That system recovered and hence our V1 feeds started ingesting data again.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have experienced ingestion delays for Google SecOps leveraging version 1 based Ingestion Feeds. Rules detections may have also experienced higher latency.\n**Workaround**\nNone at this time as the issue stands mitigated","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-17T04:19:23+00:00","modified":"2026-04-17T05:35:25+00:00","when":"2026-04-17T04:19:23+00:00","text":"**Summary**\nIngestion delays for Google SecOps Globally.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Thursday, 2026-04-16 16:56 PDT. The US Multi-region is affected and other regions may also be affected.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2026-04-16 23:45 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nCustomers may experience ingestion delays for Google SecOps leveraging version 1 based Ingestion Feeds. Rules detections may also experience higher latency.\n**Workaround**\nCustomers can migrate feeds to Version 2 ingestion feeds.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-04-17T05:35:25+00:00","modified":"2026-04-17T05:35:44+00:00","when":"2026-04-17T05:35:25+00:00","text":"**Summary**\n[Mitigated] Ingestion delays for Google SecOps leveraging version 1 based feeds Globally.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-04-16 22:26 PDT.\nFrom preliminary analysis, the issue occurred due to the internal system used to fetch data. That system recovered and hence our V1 feeds started ingesting data again.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have experienced ingestion delays for Google SecOps leveraging version 1 based Ingestion Feeds. Rules detections may have also experienced higher latency.\n**Workaround**\nNone at this time as the issue stands mitigated","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/S19EmQLF3Y6nrCfXnmo1","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"id":"914tnmfqkQf3BKpMxrnc","number":"7824115651708788609","begin":"2026-04-14T09:30:00+00:00","created":"2026-04-14T12:05:30+00:00","end":"2026-04-14T15:00:00+00:00","modified":"2026-04-21T05:48:44+00:00","external_desc":"Google SecOps search and dashboard features experienced higher latencies or queries timing out for customers in multiregion: us.","updates":[{"created":"2026-04-21T05:48:44+00:00","modified":"2026-04-21T05:48:45+00:00","when":"2026-04-21T05:48:44+00:00","text":"## Incident Report\n## Summary\nOn Tuesday, 14 April 2026, Google SecOps experienced higher latencies and query timeouts for its search and dashboard features in the multiregion: us, for a duration of 5 hours and 30 minutes. If your service or application was affected, we apologize. This is not the level of quality and reliability we strive to offer you, and we are taking immediate steps to improve the platform’s performance and availability.\n## Root Cause \\\nThe root cause of this incident was elevated latency within the storage management service, triggered by a \"hotspot\" on a specific configuration key within the underlying database. This condition resulted from a parallel service disruption in the database service which caused background maintenance jobs to fail. These background jobs are responsible for consolidating small, temporary data files into larger, more efficient sets; their failure led to a significant increase in the volume of unconsolidated files required for each query. \\\nThe sequence of events leading to customer impact was as follows:\n* A software update in the underlying database service led to performance degradation, preventing automated background jobs from consolidating temporary data files.\n* The number of unconsolidated files increased significantly, as the system could not merge them into optimized formats during the disruption.\n* Every lookup for these files required a configuration check against a single, shared configuration key in the database.\n* The high volume of lookup requests created a hotspot on the specific database tablet hosting that configuration key, resulting in extreme read contention and high latency.\n* The high latency in the storage layer caused Unified Data Model (UDM) search and dashboard queries to time out or experience severe performance degradation.\n## Remediation and Prevention\nGoogle engineers were alerted to the issue via internal monitoring frameworks (prober failure). Subsequently, a service disruption was declared, and relevant engineering teams were engaged to identify the root cause and mitigate the issue. Immediate steps were taken by engineering teams to stabilize the service and apply mitigation:\n* Engineering stabilized the storage management service by adding more capacity to specific storage management servers.\n* Engineering worked to shard the impacted configuration (cause of hotspot) to permanently reduce the load on single rows.\n* Engineers confirmed that latency returned to baseline levels and the issue was mitigated on 14 April at 08:00 PDT, once the configuration sharding was completed across all shards.\nGoogle is committed to preventing a repeat of this issue in the future and is completing the following actions:\n* **Distribute storage service configurations:** We are splitting the configuration for our storage management service into multiple shards to more effectively distribute lookup requests. This change will prevent performance bottlenecks previously caused by high volumes of requests hitting a single configuration entry.\n* **Detect unusual data volume patterns:** We are developing proactive alerting to monitor for rapid increases in the volume of data files being processed. This will allow us to identify and address potential performance triggers before they lead to customer-visible degradation.\n## Detailed Description of Impact\nOn Tuesday, 14 April 2026 from 02:30 to 08:00 US/Pacific, customers using Google SecOps in the multiregion:us experienced service degradation. Specifically, Google SecOps search and dashboard features encountered higher latencies or queries timing out. Customers trying to access these features saw queries and charts taking an unusually long time to load or failing with timeouts.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-16T07:31:08+00:00","modified":"2026-04-21T05:48:44+00:00","when":"2026-04-16T07:31:08+00:00","text":"# Preliminary Incident Report\nWe apologize for the inconvenience this service disruption may have caused. We would like to provide some information about this incident below. Please note, this information is based on our best knowledge at the time of posting and is subject to change as our investigation continues. A final Incident Report with preventative actions will be posted once our investigation is complete. If you have experienced impact outside of what is listed below, please reach out to Google Cloud Support using https://cloud.google.com/support .\n## Date/Time of the Issue (All time US/Pacific)\nIncident Start: 14 April 2026 02:30\nIncident End: 14 April 2026 08:00\nDuration: 5 hours, 30 minutes\n## Summary\nOn Tuesday, 14 April 2026, Google SecOps experienced higher latencies and query timeouts for its search and dashboard features in the multiregion:us, for a duration of 5 hours and 30 minutes. If your service or application was affected, we apologize, this is not the level of quality and reliability we strive to offer you, and we have taken and are taking immediate steps to improve the platform’s performance and availability.\n## Preliminary Root Cause\nThe root cause of this incident was elevated latency within the storage management service, triggered by a hotspot on a specific configuration key. This likely resulted from shifts in traffic patterns that increased the volume of data files required for each Unified Data Model (UDM) query.\nThis situation had a direct effect on Google SecOps, leading to delays and failures within search and dashboard functionalities.\nThe sequence of events leading to customer impact was as follows:\n- The configuration was queried for every lookup request, triggering hotspot in storage service on a single configuration row.\n- This resulted in excessive load on specific storage services resulting in the high latency.\n- The high latency led to significant failures and delays when accessing Google SecOps search and dashboard features.\n- Customers experienced queries and charts taking an unusually long time to load or failing with timeouts.\nGoogle engineers have initiated a comprehensive root cause analysis and will share updates as they become available. A thorough Incident Report, including preventative measures, will be published.\n## Remediation\nGoogle engineers were alerted to the issue via internal monitoring frameworks (prober failure), after which a Service disruption was declared and relevant engineering teams engaged to root cause and mitigate. Immediate steps were taken by engineering teams to stabilize the service and apply mitigation:\n- Engineering stabilized the storage management service by adding more capacity to specific storage management servers.\n- The Eng team worked to shard the impacted configuration (cause of hotspot) to permanently reduce the load on single rows.\n- Engineers confirmed latency recovered and the issue was mitigated on 14 April at 08:00 PDT, after the latest mitigation action was rolled out.\nWe apologize for the length and severity of this incident. We are taking immediate steps to prevent a recurrence and improve reliability in the future.\n## Description of Impact\nOn Tuesday, 14 April 2026 from 02:30 to 08:00 US/Pacific, customers using Google SecOps in the multiregion:us experienced service degradation. Specifically, Google SecOps search and dashboard features encountered higher latencies or queries timing out. Customers trying to access these features saw queries and charts taking an unusually long time to load or failing with timeouts.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-14T15:16:08+00:00","modified":"2026-04-16T07:31:08+00:00","when":"2026-04-14T15:16:08+00:00","text":"**Description:**\nThe latency and time out issue with Google Secops search and dashboard has been resolved for all affected users as of Tuesday, 2026-04-14 08:00 PDT\nFrom preliminary analysis, the issue was caused by hotspotting of the backend database. Our engineers mitigated the issue by sharding the files to reduce the load on the backend database.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms:**\nGoogle SecOps search/dashboard queries/charts took longer to load or failed to load for customers in multiregion: us.\n**Workaround:**\nThe issue is now mitigated.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-04-14T14:44:47+00:00","modified":"2026-04-14T15:16:08+00:00","when":"2026-04-14T14:44:47+00:00","text":"**Description:**\nEngineers are currently implementing additional mitigation strategies for this issue, as earlier efforts did not resolve the situation.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Tuesday, 2026-04-14 08:45 PDT\n**Customer Symptoms:**\nGoogle SecOps search/dashboard queries/charts are taking longer to load or failing to load for customers in multiregion: us.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-04-14T12:54:55+00:00","modified":"2026-04-14T14:44:47+00:00","when":"2026-04-14T12:54:55+00:00","text":"**Description:** Mitigation work is still underway by our engineering team.\nThe mitigation is expected to complete by Tuesday, 2026-04-14 08:00 PDT.\nWe will provide more information by Tuesday, 2026-04-14 08:00 PDT.\n**Customer Symptoms:** Google SecOps search/dashboard queries/charts are taking longer to load or failing to load for customers in multiregion: us.\n**Workaround:** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-04-14T12:05:30+00:00","modified":"2026-04-14T12:54:55+00:00","when":"2026-04-14T12:05:30+00:00","text":"**Description:** We are experiencing an issue with Google SecOps beginning on Tuesday, 2026-04-14 02:30 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2026-04-14 06:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms:** Google SecOps search/dashboard queries/charts are taking longer to load or failing to load for customers in multiregion: us.\n**Workaround:** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-04-21T05:48:44+00:00","modified":"2026-04-21T05:48:45+00:00","when":"2026-04-21T05:48:44+00:00","text":"## Incident Report\n## Summary\nOn Tuesday, 14 April 2026, Google SecOps experienced higher latencies and query timeouts for its search and dashboard features in the multiregion: us, for a duration of 5 hours and 30 minutes. If your service or application was affected, we apologize. This is not the level of quality and reliability we strive to offer you, and we are taking immediate steps to improve the platform’s performance and availability.\n## Root Cause \\\nThe root cause of this incident was elevated latency within the storage management service, triggered by a \"hotspot\" on a specific configuration key within the underlying database. This condition resulted from a parallel service disruption in the database service which caused background maintenance jobs to fail. These background jobs are responsible for consolidating small, temporary data files into larger, more efficient sets; their failure led to a significant increase in the volume of unconsolidated files required for each query. \\\nThe sequence of events leading to customer impact was as follows:\n* A software update in the underlying database service led to performance degradation, preventing automated background jobs from consolidating temporary data files.\n* The number of unconsolidated files increased significantly, as the system could not merge them into optimized formats during the disruption.\n* Every lookup for these files required a configuration check against a single, shared configuration key in the database.\n* The high volume of lookup requests created a hotspot on the specific database tablet hosting that configuration key, resulting in extreme read contention and high latency.\n* The high latency in the storage layer caused Unified Data Model (UDM) search and dashboard queries to time out or experience severe performance degradation.\n## Remediation and Prevention\nGoogle engineers were alerted to the issue via internal monitoring frameworks (prober failure). Subsequently, a service disruption was declared, and relevant engineering teams were engaged to identify the root cause and mitigate the issue. Immediate steps were taken by engineering teams to stabilize the service and apply mitigation:\n* Engineering stabilized the storage management service by adding more capacity to specific storage management servers.\n* Engineering worked to shard the impacted configuration (cause of hotspot) to permanently reduce the load on single rows.\n* Engineers confirmed that latency returned to baseline levels and the issue was mitigated on 14 April at 08:00 PDT, once the configuration sharding was completed across all shards.\nGoogle is committed to preventing a repeat of this issue in the future and is completing the following actions:\n* **Distribute storage service configurations:** We are splitting the configuration for our storage management service into multiple shards to more effectively distribute lookup requests. This change will prevent performance bottlenecks previously caused by high volumes of requests hitting a single configuration entry.\n* **Detect unusual data volume patterns:** We are developing proactive alerting to monitor for rapid increases in the volume of data files being processed. This will allow us to identify and address potential performance triggers before they lead to customer-visible degradation.\n## Detailed Description of Impact\nOn Tuesday, 14 April 2026 from 02:30 to 08:00 US/Pacific, customers using Google SecOps in the multiregion:us experienced service degradation. Specifically, Google SecOps search and dashboard features encountered higher latencies or queries timing out. Customers trying to access these features saw queries and charts taking an unusually long time to load or failing with timeouts.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/914tnmfqkQf3BKpMxrnc","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"sRFNTZ8vCnc9vtkQMZ53","number":"2023925199217300625","begin":"2026-04-14T03:36:00+00:00","created":"2026-04-14T09:47:21+00:00","end":"2026-04-14T13:14:00+00:00","modified":"2026-04-14T13:22:36+00:00","external_desc":"Google SecOps customers may be experiencing delayed detection, latency or failures in the US regions.","updates":[{"created":"2026-04-14T13:22:36+00:00","modified":"2026-04-14T13:22:36+00:00","when":"2026-04-14T13:22:36+00:00","text":"**Description:** The issue with Google SecOps has been resolved for all affected users as of Tuesday, 2026-04-14 06:14 PDT.\nOur engineering teams continue to investigate the root cause to prevent future occurrences.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms:** During the incident, customers encountered significant delays in the generation of security alerts and intermittent timeouts or error messages when accessing the management console.\n**Workaround:** None.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-14T11:57:47+00:00","modified":"2026-04-14T13:22:36+00:00","when":"2026-04-14T11:57:47+00:00","text":"**Description:** Engineering teams have initiated mitigation steps and are observing initial signs of service improvement, although recovery efforts are still ongoing.\nThe mitigation is expected to complete by Tuesday, 2026-04-14 09:00 PDT.\nWe will provide the next update by Tuesday, 2026-04-14 09:30 PDT.\n**Customer Symptoms:** Customers in the impacted regions may observe failures and delays while accessing Google SecOps and processing security detection alerts.\nIn addition, the users on GCP Cloud Console may experience intermittent timeouts while accessing the Sec Ops operations page, however they should be able to log in after retrying.\n**Workaround:** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-04-14T10:48:11+00:00","modified":"2026-04-14T11:57:47+00:00","when":"2026-04-14T10:48:11+00:00","text":"**Description:** Google engineers are currently investigating the issue with an underlying storage service that seems to be affecting the platform’s ability to process detection rules and serve console requests.\nWe will provide the next update by Tuesday, 2026-04-14 05:00 PDT.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms:** Customers in the impacted regions may observe failures and delays while accessing Google SecOps and processing security detection alerts.\nIn addition, the users on GCP Cloud Console may experience intermittent timeouts while accessing the Sec Ops operations page, however they should be able to log in after retrying.\n**Workaround:** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-04-14T09:47:21+00:00","modified":"2026-04-14T10:48:11+00:00","when":"2026-04-14T09:47:21+00:00","text":"**Description:** We are seeing internal requests being timed out which could impact the customer features across SecOps.\nThe team is investigating the issue to identify the root cause and proceed for mitigation.\nWe will provide the next update by Tuesday, 2026-04-14 03:45 PDT.\n**Customer Symptoms:** Customers in the impacted regions may observe failures and delays while accessing Google SecOps and generation security detection alerts.\nIn addition, the users on GCP Cloud Console may experience timeouts while accessing the Sec Ops operations page.\n**Workaround:** None at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-04-14T13:22:36+00:00","modified":"2026-04-14T13:22:36+00:00","when":"2026-04-14T13:22:36+00:00","text":"**Description:** The issue with Google SecOps has been resolved for all affected users as of Tuesday, 2026-04-14 06:14 PDT.\nOur engineering teams continue to investigate the root cause to prevent future occurrences.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms:** During the incident, customers encountered significant delays in the generation of security alerts and intermittent timeouts or error messages when accessing the management console.\n**Workaround:** None.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/sRFNTZ8vCnc9vtkQMZ53","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"Zfr1w9qmvYc1ykDqdCEJ","number":"8779502836420351796","begin":"2026-04-04T21:15:00+00:00","created":"2026-04-04T23:50:15+00:00","end":"2026-04-05T00:31:00+00:00","modified":"2026-04-05T00:43:39+00:00","external_desc":"Investigating ingestion delays for Google SecOps.","updates":[{"created":"2026-04-05T00:42:41+00:00","modified":"2026-04-05T00:43:39+00:00","when":"2026-04-05T00:42:41+00:00","text":"**Description:**\nThe issue with Google SecOps ingestion has been resolved for all affected users as of Friday, 2026-04-04 17:31 PDT.\nFrom preliminary analysis, the issue occurred due to the internal system used to fetch data. That system recovered and hence our V1 feeds started ingesting data again.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nCustomers may have experienced ingestion delays for Google SecOps leveraging version 1 Xenon based Ingestion Feeds. Rules detections may also have experienced higher latency.\n**Workaround:**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-04T23:50:15+00:00","modified":"2026-04-05T00:42:41+00:00","when":"2026-04-04T23:50:15+00:00","text":"**Description:**\nWe are experiencing an issue with Google SecOps for all regions beginning at approximately 14:15 PDT on Saturday 2026-04-04. This affects Xenon based Version 1 ingestion feeds.\nVersion 2 STS feeds are not affected.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Saturday, 2026-04-04 17:30 PDT with current details.\n**Symptoms:**\nCustomers may experience ingestion delays for Google SecOps leveraging version 1 Xenon based Ingestion Feeds. Rules detections may also experience higher latency.\n**Workaround:**\nCustomers can migrate feeds to Version 2 STS based ingestion feeds.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]}],"most_recent_update":{"created":"2026-04-05T00:42:41+00:00","modified":"2026-04-05T00:43:39+00:00","when":"2026-04-05T00:42:41+00:00","text":"**Description:**\nThe issue with Google SecOps ingestion has been resolved for all affected users as of Friday, 2026-04-04 17:31 PDT.\nFrom preliminary analysis, the issue occurred due to the internal system used to fetch data. That system recovered and hence our V1 feeds started ingesting data again.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nCustomers may have experienced ingestion delays for Google SecOps leveraging version 1 Xenon based Ingestion Feeds. Rules detections may also have experienced higher latency.\n**Workaround:**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/Zfr1w9qmvYc1ykDqdCEJ","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Finland (europe-north1)","id":"europe-north1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"},{"title":"Iowa (us-central1)","id":"us-central1"},{"title":"South Carolina (us-east1)","id":"us-east1"}]},{"id":"LagjDocudaaZ1iZPLjjC","number":"2018423999926860971","begin":"2026-04-03T18:53:00+00:00","created":"2026-04-03T19:21:44+00:00","end":"2026-04-09T16:01:00+00:00","modified":"2026-04-09T17:24:06+00:00","external_desc":"Mandiant Digital Threat Monitoring is experiencing increased alert backlog.","updates":[{"created":"2026-04-09T17:23:35+00:00","modified":"2026-04-09T17:24:06+00:00","when":"2026-04-09T17:23:35+00:00","text":"**Description**\nThe increased alert backlog issue with Mandiant Digital Threat Monitoring has been resolved as of 2026-04-09 at 9:01 US/Pacific.\nAlerts will remain ungrouped and without a similarity score.\n**Workaround**\nFiltering by monitor name will allow users to see all alerts for a given monitor.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-06T18:56:21+00:00","modified":"2026-04-09T17:23:35+00:00","when":"2026-04-06T18:56:21+00:00","text":"**Description:**\nMandiant Digital Threat Monitoring is experiencing increased alert backlog and as a result customers may experience seeing new alerts generated for events up to 6 days ago.\nFurthermore, these alerts may be ungrouped and without a similarity score.\nOur engineering team is actively working on reducing the alert backlog. We expect the backlog to be fully processed by Friday, 2026-04-10 16:00 US/Pacific.\nWe will provide more information by Friday, 2026-04-10 16:30 US/Pacific with current details.\n**Workaround:**\nFiltering by monitor name will allow users to see all alerts for a given monitor.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-04-03T19:21:44+00:00","modified":"2026-04-06T18:56:21+00:00","when":"2026-04-03T19:21:44+00:00","text":"**Description:**\nMandiant Digital Threat Monitoring is experiencing increased alert backlog and as a result customers may experience seeing new alerts generated for events up to 6 days ago.\nFurthermore, these alerts may be ungrouped and without a similarity score.\nOur engineering team is actively working on reducing the alert backlog.\nWe will provide more information by Monday, 2026-04-06 12:00 US/Pacific with current details.\n**Workaround:**\nFiltering by monitor name will allow users to see all alerts for a given monitor.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-04-09T17:23:35+00:00","modified":"2026-04-09T17:24:06+00:00","when":"2026-04-09T17:23:35+00:00","text":"**Description**\nThe increased alert backlog issue with Mandiant Digital Threat Monitoring has been resolved as of 2026-04-09 at 9:01 US/Pacific.\nAlerts will remain ungrouped and without a similarity score.\n**Workaround**\nFiltering by monitor name will allow users to see all alerts for a given monitor.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"dgtVvWgKSlxi01VBC8mt","service_name":"Mandiant Digital Threat Monitoring","affected_products":[{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"}],"uri":"incidents/LagjDocudaaZ1iZPLjjC","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"89hU1PgUVZx99yUUTAmx","number":"4457021737282917114","begin":"2026-04-03T11:00:00+00:00","created":"2026-04-03T15:24:17+00:00","end":"2026-04-03T20:00:00+00:00","modified":"2026-04-03T20:07:44+00:00","external_desc":"Mandiant Advantage Threat Intelligence customers are experiencing API errors related to MATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities.","updates":[{"created":"2026-04-03T20:07:44+00:00","modified":"2026-04-03T20:07:44+00:00","when":"2026-04-03T20:07:44+00:00","text":"The issue with Mandiant Advantage Threat Intelligence has been resolved for all affected users as of Friday, 2026-04-03 13:00 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-03T18:51:01+00:00","modified":"2026-04-03T20:07:44+00:00","when":"2026-04-03T18:51:01+00:00","text":"We are experiencing an issue with the MATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities beginning on Friday, 2026-04-03 4:36:54 AM US/Pacific.\nOur engineering team is continuing to work towards mitigation of this issue. We do not have an ETA for mitigation at this time.\nWe will provide more information by Friday, 2026-04-03 14:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nMandiant Advantage Threat Intelligence customers are experiencing API errors related toMATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-04-03T16:55:08+00:00","modified":"2026-04-03T18:51:01+00:00","when":"2026-04-03T16:55:08+00:00","text":"We are experiencing an issue with the MATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities beginning on Friday, 2026-04-03 4:36:54 AM US/Pacific.\nOur engineering team has identified a potential mitigation for this issue and are currently working to validate the fix.\nWe will provide more information by Friday, 2026-04-03 11:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nMandiant Advantage Threat Intelligence customers are experiencing API errors related toMATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-04-03T16:19:11+00:00","modified":"2026-04-03T16:55:08+00:00","when":"2026-04-03T16:19:11+00:00","text":"We are experiencing an issue with the MATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities beginning on Friday, 2026-04-03 4:36:54 AM US/Pacific.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Friday, 2026-04-03 10:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nMandiant Advantage Threat Intelligence customers are experiencing API errors related toMATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-04-03T15:24:17+00:00","modified":"2026-04-03T16:19:11+00:00","when":"2026-04-03T15:24:17+00:00","text":"We are experiencing an issue with the MATI Dashboard, Reports, Campaigns, Vulnerabilities, and Actors beginning on Friday, 2026-04-03 04:00 US/Pacific.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Friday, 2026-04-03 09:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nMandiant Advantage Threat Intelligence customers are experiencing API errors related toMATI Dashboard, Actors, Campaigns, Malware, Reports, Vulnerabilities.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[]}],"most_recent_update":{"created":"2026-04-03T20:07:44+00:00","modified":"2026-04-03T20:07:44+00:00","when":"2026-04-03T20:07:44+00:00","text":"The issue with Mandiant Advantage Threat Intelligence has been resolved for all affected users as of Friday, 2026-04-03 13:00 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"Dvtt8cwUdpUYoGMpt2Fc","service_name":"Mandiant Advantage Threat Intelligence","affected_products":[{"title":"Mandiant Advantage Threat Intelligence","id":"Dvtt8cwUdpUYoGMpt2Fc"}],"uri":"incidents/89hU1PgUVZx99yUUTAmx","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"DNZ9U962Jqk63JSMPzAb","number":"3635435410050964266","begin":"2026-04-01T02:43:00+00:00","created":"2026-04-01T02:47:16+00:00","end":"2026-04-01T04:37:00+00:00","modified":"2026-04-01T05:23:16+00:00","external_desc":"Mandiant Managed Defense Portal Threat Hunting section is inaccessible.","updates":[{"created":"2026-04-01T05:19:09+00:00","modified":"2026-04-01T05:23:16+00:00","when":"2026-04-01T05:19:09+00:00","text":"**Title**\nMandiant Managed Defense Portal Threat Hunting section is now accessible.\n**Description**\nThe issue with Mandiant Managed Defense has been resolved for all affected projects as of Tuesday, 2026-03-31 21:37 PDT.\nFrom preliminary analysis, the issue was caused by a configuration change in the load balancer settings.\nOur engineers mitigated the issue by restoring the configuration settings.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nThe feature inside the portal to display stats about the hunt service (https://md.mandiant.com/threat_hunting) is now accessible.\nThe threat hunting service was not affected by this issue.\n**Workaround**\nThis incident is now resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-04-01T03:40:43+00:00","modified":"2026-04-01T05:19:09+00:00","when":"2026-04-01T03:40:43+00:00","text":"**Title**\nMandiant Managed Defense Portal Threat Hunting section is inaccessible.\n**Description**\nWe are experiencing an issue with the Mandiant Managed Defense Portal beginning at Tuesday, 2026-03-31 18:34 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2026-04-01 05:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nThe feature inside the portal to display stats about the hunt service (https://md.mandiant.com/threat_hunting) is inaccessible.\nThe threat hunting service is not affected by this issue.\n**Workaround**\nCustomers may try viewing threat hunting Investigations published by filtering the Investigations list by Source as “Hunting”.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-04-01T02:47:16+00:00","modified":"2026-04-01T03:40:43+00:00","when":"2026-04-01T02:47:16+00:00","text":"**Title**\nMandiant Managed Defense Portal Threat Hunting section is inaccessible.\n**Description**\nWe are experiencing an issue with the Mandiant Managed Defense Portal beginning at Tuesday, 2026-03-31 18:34 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2026-03-31 20:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nThe Threat Hunting section in the Managed Defense Portal (https://md.mandiant.com/threat_hunting) is inaccessible due to a network error.\nThe threat hunting service is not affected by this issue.\n**Workaround**\nCustomers may try viewing threat hunting Investigations published by filtering the Investigations list by Source as “Hunting”.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-04-01T05:19:09+00:00","modified":"2026-04-01T05:23:16+00:00","when":"2026-04-01T05:19:09+00:00","text":"**Title**\nMandiant Managed Defense Portal Threat Hunting section is now accessible.\n**Description**\nThe issue with Mandiant Managed Defense has been resolved for all affected projects as of Tuesday, 2026-03-31 21:37 PDT.\nFrom preliminary analysis, the issue was caused by a configuration change in the load balancer settings.\nOur engineers mitigated the issue by restoring the configuration settings.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nThe feature inside the portal to display stats about the hunt service (https://md.mandiant.com/threat_hunting) is now accessible.\nThe threat hunting service was not affected by this issue.\n**Workaround**\nThis incident is now resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"zall","service_name":"Multiple Products","affected_products":[{"title":"Mandiant Hunt","id":"uomxopvCRv8y7bvrA1tK"},{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/DNZ9U962Jqk63JSMPzAb","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Belgium (europe-west1)","id":"europe-west1"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Netherlands (europe-west4)","id":"europe-west4"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Global","id":"global"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"jwXZCkhPjeU8yihzzLuU","number":"8652355073905079088","begin":"2026-03-27T14:09:00+00:00","created":"2026-03-30T15:02:13+00:00","end":"2026-03-30T15:40:00+00:00","modified":"2026-03-30T15:54:33+00:00","external_desc":"Some Google SecOps customers are experiencing issues loading legacy dashboards in US","updates":[{"created":"2026-03-30T15:54:10+00:00","modified":"2026-03-30T15:54:33+00:00","when":"2026-03-30T15:54:10+00:00","text":"**Summary:**\nSome Google SecOps customers experienced issues loading legacy dashboards in Europe and US\n**Description:**\nThe issue with Google SecOps has been resolved for all affected users as of Monday, 2026-03-30 08:40 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nSome customers may have experienced issues loading legacy dashboards.\n**Workaround:**\nAffected customers could use native dashboards as a workaround.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-03-30T15:02:13+00:00","modified":"2026-03-30T15:54:10+00:00","when":"2026-03-30T15:02:13+00:00","text":"**Summary:**\nSome Google SecOps customers are experiencing issues loading legacy dashboards in US\n**Description:**\nWe are experiencing an issue with Google SecOps beginning on Friday, 2026-03-27 07:09 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Monday, 2026-03-30 08:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nSome customers may experience issues loading legacy dashboards.\n**Workaround:**\nAffected customers may use native dashboards as a workaround.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-03-30T15:54:10+00:00","modified":"2026-03-30T15:54:33+00:00","when":"2026-03-30T15:54:10+00:00","text":"**Summary:**\nSome Google SecOps customers experienced issues loading legacy dashboards in Europe and US\n**Description:**\nThe issue with Google SecOps has been resolved for all affected users as of Monday, 2026-03-30 08:40 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nSome customers may have experienced issues loading legacy dashboards.\n**Workaround:**\nAffected customers could use native dashboards as a workaround.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/jwXZCkhPjeU8yihzzLuU","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"},{"title":"Multi-region: us","id":"us"}]},{"id":"HnzwpyTWLbegscHApoay","number":"12492820915395819324","begin":"2026-03-23T08:51:00+00:00","created":"2026-03-23T10:38:45+00:00","end":"2026-03-23T13:30:00+00:00","modified":"2026-03-23T14:03:27+00:00","external_desc":"Google SecOps customers are experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.","updates":[{"created":"2026-03-23T14:03:24+00:00","modified":"2026-03-23T14:03:27+00:00","when":"2026-03-23T14:03:24+00:00","text":"**Summary**\nGoogle SecOps customers were experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Monday, 2026-03-23 06:30 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nGoogle SecOps customers were experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-03-23T12:22:03+00:00","modified":"2026-03-23T14:03:24+00:00","when":"2026-03-23T12:22:03+00:00","text":"**Summary**\nGoogle SecOps customers are experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Monday, 2026-03-23 01:51 PDT.\nThe increase in latency is 2x (35 secs to 73 secs) in 50% (p50) of the queries and 3x (50secs to 150 sec) in 10% (p90) of the queries.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Monday, 2026-03-23 06:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nGoogle SecOps customers are experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"created":"2026-03-23T10:38:45+00:00","modified":"2026-03-23T12:22:03+00:00","when":"2026-03-23T10:38:45+00:00","text":"**Summary**\nGoogle SecOps customers are experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Monday, 2026-03-23 01:51 PDT.\nThe increase in latency is 2x (35 secs to 73 secs) in 50% (p50) of the queries and 3x (50secs to 150 sec) in 10% (p90) of the queries.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Monday, 2026-03-23 04:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nGoogle SecOps customers are experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2026-03-23T14:03:24+00:00","modified":"2026-03-23T14:03:27+00:00","when":"2026-03-23T14:03:24+00:00","text":"**Summary**\nGoogle SecOps customers were experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Monday, 2026-03-23 06:30 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nGoogle SecOps customers were experiencing increased latency in Search, Dashboard and Rules queries in multiregion europe.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/HnzwpyTWLbegscHApoay","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"Fq7fcqsXSP2ehqeun6Lv","number":"2989405227443274933","begin":"2026-03-20T15:00:00+00:00","created":"2026-03-20T18:09:28+00:00","end":"2026-03-21T22:34:00+00:00","modified":"2026-03-21T22:41:53+00:00","external_desc":"Some customers using Mandiant Digital Threat Intelligence may be experiencing issues accessing certain alerts","updates":[{"created":"2026-03-21T22:38:41+00:00","modified":"2026-03-21T22:41:53+00:00","when":"2026-03-21T22:38:41+00:00","text":"**Summary:**\nSome customers using Mandiant Digital Threat Intelligence may have received emails for alerts that return 404s.\n**Description:**\nSome customers using Mandiant Digital Threat Intelligence may be experiencing issues accessing alerts for emails sent on 2026-03-20 between 8AM and 9AM PDT.\nOur engineering team has identified the root cause and has completed the mitigation. A hardware failure required restoring a subset of documents. Documents that were impacted during this time have been restored, although links to alerts in emails during the impacted time will still return 404.\n**Customer Symptoms:**\nCustomers may be experiencing 404 errors accessing certain alerts generated between 8AM and 9 AM PDT on 2026-03-20.\n**Workaround:**\nAs a workaround, customers can search for documents using Research Tools for the period from 7am PDT to 8:30am PDT. Customers can use these time frames to reduce search volume.\nAdditionally, when fetching alerts through the API, impacted users can set refs=false so that the doc, labels, and topics are not returned in the response body (https://gtidocs.virustotal.com/reference/get-alerts).","status":"AVAILABLE","affected_locations":[]},{"created":"2026-03-21T19:07:40+00:00","modified":"2026-03-21T22:38:41+00:00","when":"2026-03-21T19:07:40+00:00","text":"**Summary:**\nSome customers using Mandiant Digital Threat Intelligence may be experiencing issues accessing certain alerts.\n**Description:**\nOur engineers have identified the root cause and are actively working on backfilling the data pertaining to the affected alerts.\nWe will provide more information by Saturday, 2026-03-21 16:00 PDT\n**Customer Symptoms:**\nCustomers may be experiencing 404 errors accessing certain alerts generated between 8AM and 9 AM PDT on 2026-03-20\n**Workaround:**\nAs a workaround, customers can search for documents using Research Tools for the period from 7am PDT to 8:30am PDT. Customers can use these time frames to reduce search volume.\nAdditionally, when fetching alerts through the API, impacted users can set refs=false so that the doc, labels, and topics are not returned in the response body (https://gtidocs.virustotal.com/reference/get-alerts).","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-03-20T22:16:01+00:00","modified":"2026-03-21T19:07:40+00:00","when":"2026-03-20T22:16:01+00:00","text":"**Summary:**\nSome customers using Mandiant Digital Threat Intelligence may be experiencing issues accessing certain alerts.\n**Description:**\nOur engineering team has identified the root cause and is working on the mitigation.\nWe will provide more information by Saturday, 2026-03-21 12:00 PDT.\n**Customer Symptoms:**\nCustomers may be experiencing 404 errors accessing certain alerts generated between 8AM and 9 AM PDT on 2026-03-20\n**Workaround:**\nAs a workaround, customers can search for documents using Research Tools for the period from 7am PDT to 8:30am PDT. Customers can use these time frames to reduce search volume.\nAdditionally, when fetching alerts through the API, impacted users can set refs=false so that the doc, labels, and topics are not returned in the response body (https://gtidocs.virustotal.com/reference/get-alerts).","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-03-20T18:09:28+00:00","modified":"2026-03-20T22:16:01+00:00","when":"2026-03-20T18:09:28+00:00","text":"**Description:**\nSome customers using Mandiant Digital Threat Intelligence may be experiencing issues accessing alerts generated on 2026-03-20 between 8AM and 9AM PDT.\nOur engineering team has identified the cause of the issue and is assessing options. We currently do not have an ETA for resolution.\n**Symptoms:**\nCustomers may be experiencing 404 errors accessing certain alerts generated between 8AM and 9 AM PDT on 2026-03-20\n**Workarounds:**\nNo workarounds available at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-03-21T22:38:41+00:00","modified":"2026-03-21T22:41:53+00:00","when":"2026-03-21T22:38:41+00:00","text":"**Summary:**\nSome customers using Mandiant Digital Threat Intelligence may have received emails for alerts that return 404s.\n**Description:**\nSome customers using Mandiant Digital Threat Intelligence may be experiencing issues accessing alerts for emails sent on 2026-03-20 between 8AM and 9AM PDT.\nOur engineering team has identified the root cause and has completed the mitigation. A hardware failure required restoring a subset of documents. Documents that were impacted during this time have been restored, although links to alerts in emails during the impacted time will still return 404.\n**Customer Symptoms:**\nCustomers may be experiencing 404 errors accessing certain alerts generated between 8AM and 9 AM PDT on 2026-03-20.\n**Workaround:**\nAs a workaround, customers can search for documents using Research Tools for the period from 7am PDT to 8:30am PDT. Customers can use these time frames to reduce search volume.\nAdditionally, when fetching alerts through the API, impacted users can set refs=false so that the doc, labels, and topics are not returned in the response body (https://gtidocs.virustotal.com/reference/get-alerts).","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"dgtVvWgKSlxi01VBC8mt","service_name":"Mandiant Digital Threat Monitoring","affected_products":[{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"}],"uri":"incidents/Fq7fcqsXSP2ehqeun6Lv","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"nirgVYt314zYV2sPj2Zz","number":"13336233300045609055","begin":"2026-03-19T22:50:00+00:00","created":"2026-03-19T22:58:26+00:00","end":"2026-03-20T06:50:00+00:00","modified":"2026-03-20T07:47:17+00:00","external_desc":"[Informational] Service update notification for Google SecOps.","updates":[{"created":"2026-03-20T07:46:44+00:00","modified":"2026-03-20T07:47:17+00:00","when":"2026-03-20T07:46:44+00:00","text":"**Summary** [Informational] Service update notification for Google SecOps.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-03-19 23:50 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nAll rule-level settings are again respected, independent of pack settings.\nAll alerts and detections from affected rules will be reprocessed over the duration of the service update. Reprocessed alerts and detections may arrive with up to a 12 hour delay.\n**Workaround**\nNone for now as the issue stands mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-03-20T03:08:02+00:00","modified":"2026-03-20T07:46:44+00:00","when":"2026-03-20T03:08:02+00:00","text":"**Summary**\n[Informational] Service update notification for Google SecOps.\n**Description**\nGoogle SecOps will be performing a service update between Thursday, 2026-03-19 18:00 PDT and Friday, 2026-03-20 00:30 PDT. The previously communicated 20:00 PDT window has been extended to 00:30 PDT.\nThis update is specifically targeted at customers with the following attributes: * Region: multiregions/us * Feature: Customers that are using Private Preview for Unified Rules and have configured Curated Detections with settings that override the corresponding rule pack settings.\nFor more information on the Unified Rules private preview, see the following documentation: https://docs.cloud.google.com/chronicle/docs/detection/unified-rules/get-started\nWe will provide an update by Friday, 2026-03-20 01:00 PDT with current details.\n**Symptoms**\nDuring this brief window, the rules with customized settings will revert to the settings for the rule’s parent pack. All alerts and detections from these rules will be created with up to a 12 hour delay.\nThis can manifest itself in changes to rule alerting status, Rules Dashboard and API may temporarily show inconsistent \"live\" or \"alerting\" states.\nAfter the update has completed, all rule-level settings will be respected, independent of pack settings.\n**Workaround**\nRule Pack settings will be respected; these can be updated to provide the desired detection behavior throughout the service window.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2026-03-19T22:58:26+00:00","modified":"2026-03-20T03:08:02+00:00","when":"2026-03-19T22:58:26+00:00","text":"**Summary**\n[Informational] Service update notification for Google SecOps.\n**Description**\nGoogle SecOps will be performing a service update on Thursday, 2026-03-19 between 18:00 PDT and 20:00 PDT.\nThis update is specifically targeted at customers with the following attributes:\n* Region: multiregions/us\n* Feature: Customers that are using Private Preview for Unified Rules and have configured Curated Detections with settings that override the corresponding rule pack settings.\nFor more information on the Unified Rules private preview, see the following documentation: https://docs.cloud.google.com/chronicle/docs/detection/unified-rules/get-started\nWe will provide an update by Thursday, 2026-03-19 20:30 PDT with current details.\n**Symptoms**\nDuring this brief window, the rules with customized settings will revert to the settings for the rule’s parent pack. All alerts and detections from these rules will be created with up to a 2 hour delay.\nThis can manifest itself in changes to rule alerting status, Rules Dashboard and API may temporarily show inconsistent \"live\" or \"alerting\" states.\nAfter the update has completed, all rule-level settings will be respected, independent of pack settings.\n**Workaround**\nRule Pack settings will be respected; these can be updated to provide the desired detection behavior throughout the service window.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-03-20T07:46:44+00:00","modified":"2026-03-20T07:47:17+00:00","when":"2026-03-20T07:46:44+00:00","text":"**Summary** [Informational] Service update notification for Google SecOps.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-03-19 23:50 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nAll rule-level settings are again respected, independent of pack settings.\nAll alerts and detections from affected rules will be reprocessed over the duration of the service update. Reprocessed alerts and detections may arrive with up to a 12 hour delay.\n**Workaround**\nNone for now as the issue stands mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/nirgVYt314zYV2sPj2Zz","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"7bRpxkK7ytLn7Lp7gg25","number":"13448261581001329490","begin":"2026-03-10T23:30:00+00:00","created":"2026-03-11T03:09:36+00:00","end":"2026-03-11T04:10:00+00:00","modified":"2026-03-11T04:24:22+00:00","external_desc":"Google SecOps customers may experience errors loading Legacy Dashboards in few regions","updates":[{"created":"2026-03-11T04:24:22+00:00","modified":"2026-03-11T04:24:22+00:00","when":"2026-03-11T04:24:22+00:00","text":"**Summary**\nGoogle SecOps customers might have experienced errors loading Legacy Dashboards in few regions\n**Description**\nWe experienced an issue with SecOps Legacy Dashboard beginning at 2026-03-10 16:30 PDT.\nOur engineering team mitigated the impact by identifying the flag change that was causing this issue and reverting it.\nThe issue has been resolved for all affected users as of Tuesday, 2026-03-10 21:10 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers might have experienced errors while loading their legacy queries for looker dashboards in a few regions. The issue is now resolved.\n**Workaround**\nNone","status":"AVAILABLE","affected_locations":[]},{"created":"2026-03-11T03:09:36+00:00","modified":"2026-03-11T04:24:22+00:00","when":"2026-03-11T03:09:36+00:00","text":"**Summary**\nGoogle SecOps customers may experience errors loading Legacy Dashboards in few regions\n**Description**\nWe are experiencing an issue with SecOps Legacy Dashboard beginning at Tuesday, 2026-03-10 16:30 PDT.\nWe believe the issue with Google SecOps is partially resolved for the below regions:\neurope-west12, europe-west3, europe-west6, europe-west9, me-central1, me-central2, africa-south1, me-west1\nFull resolution is expected to complete by Tuesday, 2026-03-10 21:00 PDT.\nWe will provide an update by Tuesday, 2026-03-10 21:30 PDT with current details.\n**Symptoms**\nImpacted customers may have experienced errors while loading their legacy queries for looker dashboards in few regions.\nThe issue has been limited to the below regions as it is mitigated for few regions already:\neurope-west12, europe-west3, europe-west6, europe-west9, me-central1, me-central2, africa-south1, me-west1\nWe are currently working to mitigate the impact in europe-multiregion, europe-west2 regions.\n**Workaround**\nThe impacted customers can use the newer Dashboard feature instead of Legacy Dashboards.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"}]}],"most_recent_update":{"created":"2026-03-11T04:24:22+00:00","modified":"2026-03-11T04:24:22+00:00","when":"2026-03-11T04:24:22+00:00","text":"**Summary**\nGoogle SecOps customers might have experienced errors loading Legacy Dashboards in few regions\n**Description**\nWe experienced an issue with SecOps Legacy Dashboard beginning at 2026-03-10 16:30 PDT.\nOur engineering team mitigated the impact by identifying the flag change that was causing this issue and reverting it.\nThe issue has been resolved for all affected users as of Tuesday, 2026-03-10 21:10 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nImpacted customers might have experienced errors while loading their legacy queries for looker dashboards in a few regions. The issue is now resolved.\n**Workaround**\nNone","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/7bRpxkK7ytLn7Lp7gg25","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"}]},{"id":"YUnarm1Dq29PAWsi4tA9","number":"9686349514157032400","begin":"2026-03-09T11:00:00+00:00","created":"2026-03-09T18:37:55+00:00","end":"2026-03-09T16:10:00+00:00","modified":"2026-03-09T18:41:20+00:00","external_desc":"Google SecOps customers experienced issues logging into the SecOps UI","updates":[{"created":"2026-03-09T18:41:20+00:00","modified":"2026-03-09T18:41:20+00:00","when":"2026-03-09T18:41:20+00:00","text":"**Description**\nSome customers in us-central1 region experienced an issue authenticating and accessing Google SecOps web application beginning on Wednesday 2026-03-09 04:00 US/Pacific.\nThe issue has been resolved for all affected projects as of Wednesday 2026-03-09 09:10 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis**\nUnable to login in to the SecOps website.\n**Workaround**\nN/A","status":"AVAILABLE","affected_locations":[]},{"created":"2026-03-09T18:37:55+00:00","modified":"2026-03-09T18:41:20+00:00","when":"2026-03-09T18:37:55+00:00","text":"**Description**\nSome customers in us-central1 region experienced an issue authenticating and accessing Google SecOps web application beginning on Wednesday 2026-03-09 04:00 US/Pacific.\nThe issue has been resolved for all affected projects as of Wednesday 2026-03-09 09:10 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis**\nUnable to login in to the SecOps website.\n**Workaround**\nN/A","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Iowa (us-central1)","id":"us-central1"}]}],"most_recent_update":{"created":"2026-03-09T18:41:20+00:00","modified":"2026-03-09T18:41:20+00:00","when":"2026-03-09T18:41:20+00:00","text":"**Description**\nSome customers in us-central1 region experienced an issue authenticating and accessing Google SecOps web application beginning on Wednesday 2026-03-09 04:00 US/Pacific.\nThe issue has been resolved for all affected projects as of Wednesday 2026-03-09 09:10 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis**\nUnable to login in to the SecOps website.\n**Workaround**\nN/A","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"GTT16Lf72XZKWArC9VxA","service_name":"Google SecOps SOAR","affected_products":[{"title":"Google SecOps SOAR","id":"GTT16Lf72XZKWArC9VxA"}],"uri":"incidents/YUnarm1Dq29PAWsi4tA9","currently_affected_locations":[],"previously_affected_locations":[{"title":"Iowa (us-central1)","id":"us-central1"}]},{"id":"xNuMc5QAsWGwS1LsqThZ","number":"10359456992071338271","begin":"2026-02-26T22:20:00+00:00","created":"2026-02-26T23:45:26+00:00","end":"2026-02-26T22:50:00+00:00","modified":"2026-02-26T23:45:51+00:00","external_desc":"Mandiant Managed Defense customers may have experienced SSO unavailability","updates":[{"created":"2026-02-26T23:45:26+00:00","modified":"2026-02-26T23:45:51+00:00","when":"2026-02-26T23:45:26+00:00","text":"**Summary**\nMandiant Managed Defense customers may have experienced SSO unavailability\n**Description**\nMandiant Managed Defense SSO may have been unavailable for the customers on Thursday, 2026-02-26 between 14:20 PST to 14:50 PST.\nOur Engineering team has identified the root cause of the issue and applied the fix to mitigate the impact.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have seen Cloudflare error pages, or missing content in the customer Portal, impacting their ability to log in to Managed Defense Portal and Mandiant Advantage products.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]}],"most_recent_update":{"created":"2026-02-26T23:45:26+00:00","modified":"2026-02-26T23:45:51+00:00","when":"2026-02-26T23:45:26+00:00","text":"**Summary**\nMandiant Managed Defense customers may have experienced SSO unavailability\n**Description**\nMandiant Managed Defense SSO may have been unavailable for the customers on Thursday, 2026-02-26 between 14:20 PST to 14:50 PST.\nOur Engineering team has identified the root cause of the issue and applied the fix to mitigate the impact.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have seen Cloudflare error pages, or missing content in the customer Portal, impacting their ability to log in to Managed Defense Portal and Mandiant Advantage products.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"9aKw9s8p43AYeBmo4Gvx","service_name":"Mandiant Managed Defense","affected_products":[{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/xNuMc5QAsWGwS1LsqThZ","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"K6VB74JiPnRu1gp2hYyN","number":"12283818099846420962","begin":"2026-02-23T14:00:00+00:00","created":"2026-02-24T19:55:59+00:00","end":"2026-02-23T22:00:00+00:00","modified":"2026-02-24T22:14:17+00:00","external_desc":"Google SecOps customers using Bindplane agents configured with HTTPS endpoints are experiencing intermittent drop in ingestion volume in US multi-region, asia-south-1 and me-central-1. It’s possible customers in other regions may experience the issue.","updates":[{"created":"2026-02-24T22:14:17+00:00","modified":"2026-02-24T22:14:18+00:00","when":"2026-02-24T22:14:17+00:00","text":"**Summary**\nGoogle SecOps customers using Bindplane agents configured with HTTPS endpoints may experience intermittent drop in ingestion volume in US multi-region, asia-south-1 and me-central-1. It’s possible that customers in other regions may experience the issue as well.\n**Description**\nA fix is now available for customers experiencing issues with Google SecOps customers using Bindplane agents configured with HTTPS. The impacted customers should update to Bindplane Collector v1.94.2 which resolves the issue by enqueuing the data retrying when 429s occur. This release is available in [GitHub](https://github.com/observIQ/bindplane-otel-collector/releases/tag/v1.94.2) and when installing the agent through the Bindplane UI.\nIf the data still exist at the log source, customers should try to recollect that data. For example: with Windows Events Source, the Start at Beginning setting in the Bindplane receiver, can be used to recollect the potentially lost events.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nHow to Monitor if you are impacted:\nIf you are using Bindplane HTTPS then follow below-\n1. Go to your GCP project on the SIEM settings\n2. APIs \u0026 Services\n3. Select Chronicle APIs\n4. Select only `ImportLogs` in methods\nLook for any 429 errors in `Traffic by response code`\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-02-24T19:55:59+00:00","modified":"2026-02-24T22:14:17+00:00","when":"2026-02-24T19:55:59+00:00","text":"**Description**\nWe are experiencing intermittent issues with Google SecOps for customers using HTTPS endpoints using Bindplane, symptoms began Monday, 2026-02-23 06:00 PST and continued for approximately one hour. The issue reoccurred on Tuesday, 2026-02-24 06:00 PST, for approximately one hour. The issue has been intermittent since then.\nSecOps started returning HTTP 429 errors to certain customers for a limited period of time, which led to the Bindplane agent dropping logs.\nOur engineering team and Bindplane’s engineering team have identified the issue and are working on a fix.\nWe will provide more information by Tuesday, 2026-02-24 15:30 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Diagnosis/Symptoms**\nHow to Monitor if you are impacted:\nIf you are using Bindplane HTTPS then follow below-\n1. Go to your GCP project on the SIEM settings\n2. APIs \u0026 Services\n3. Select Chronicle APIs\n4. select only `ImportLogs` in methods\nLook for any 429 errors in `Traffic by response code`\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-02-24T22:14:17+00:00","modified":"2026-02-24T22:14:18+00:00","when":"2026-02-24T22:14:17+00:00","text":"**Summary**\nGoogle SecOps customers using Bindplane agents configured with HTTPS endpoints may experience intermittent drop in ingestion volume in US multi-region, asia-south-1 and me-central-1. It’s possible that customers in other regions may experience the issue as well.\n**Description**\nA fix is now available for customers experiencing issues with Google SecOps customers using Bindplane agents configured with HTTPS. The impacted customers should update to Bindplane Collector v1.94.2 which resolves the issue by enqueuing the data retrying when 429s occur. This release is available in [GitHub](https://github.com/observIQ/bindplane-otel-collector/releases/tag/v1.94.2) and when installing the agent through the Bindplane UI.\nIf the data still exist at the log source, customers should try to recollect that data. For example: with Windows Events Source, the Start at Beginning setting in the Bindplane receiver, can be used to recollect the potentially lost events.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nHow to Monitor if you are impacted:\nIf you are using Bindplane HTTPS then follow below-\n1. Go to your GCP project on the SIEM settings\n2. APIs \u0026 Services\n3. Select Chronicle APIs\n4. Select only `ImportLogs` in methods\nLook for any 429 errors in `Traffic by response code`\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/K6VB74JiPnRu1gp2hYyN","currently_affected_locations":[],"previously_affected_locations":[{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Multi-region: us","id":"us"}]},{"id":"cSyWjLDcqH7eL7bNDDLV","number":"6974755209664332981","begin":"2026-02-12T13:20:00+00:00","created":"2026-02-12T15:42:49+00:00","end":"2026-02-12T16:46:00+00:00","modified":"2026-02-17T21:34:01+00:00","external_desc":"The issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-02-12 08:46 US/Pacific.","updates":[{"created":"2026-02-12T16:58:05+00:00","modified":"2026-02-12T16:58:20+00:00","when":"2026-02-12T16:58:05+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-02-12 08:46 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue..\n**Diagnosis / Customer Symptoms**\nSecOps customers may observe delay in ingestion.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-02-12T15:42:49+00:00","modified":"2026-02-12T16:58:05+00:00","when":"2026-02-12T15:42:49+00:00","text":"**Description**\nMitigation work is currently underway by our engineering team.\nThe mitigation is expected to be completed by Thursday, 2026-02-12 09:00 US/Pacific.\nWe will provide an update by Thursday, 2026-02-12 09:30 US/Pacific with current details.\n**Diagnosis / Customer Symptoms**\nSecOps customers may observe delay in ingestion.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[]}],"most_recent_update":{"created":"2026-02-12T16:58:05+00:00","modified":"2026-02-12T16:58:20+00:00","when":"2026-02-12T16:58:05+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Thursday, 2026-02-12 08:46 US/Pacific.\nWe thank you for your patience while we worked on resolving the issue..\n**Diagnosis / Customer Symptoms**\nSecOps customers may observe delay in ingestion.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/cSyWjLDcqH7eL7bNDDLV","currently_affected_locations":[],"previously_affected_locations":[]},{"id":"nuU89kS9ifqo12fEqPJr","number":"15589965330685483994","begin":"2026-02-09T22:30:00+00:00","created":"2026-02-10T08:59:29+00:00","end":"2026-02-18T17:00:00+00:00","modified":"2026-02-18T18:31:39+00:00","external_desc":"Mandiant Digital Threat Monitoring customers experiencing issues in receiving emails or new alerts and the research tools are not returning results.","updates":[{"created":"2026-02-18T18:31:39+00:00","modified":"2026-02-18T18:31:40+00:00","when":"2026-02-18T18:31:39+00:00","text":"**Summary:**\nMandiant Digital Threat Monitoring customers may have experienced issues in receiving emails or new alerts, and may have seen HTTP 404 Not Found error when viewing alerts through the web console or API.\n**Description:**\nThe issue with Mandiant Digital Threat Monitoring has been resolved as of 2026-02-18 at 09:00 US/Pacific.\n**Customer Symptoms:**\nCustomers were unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST and received an HTTP 404 Not Found error.\n**Workaround:**\nAPI users were able to set the query parameter refs=false for all endpoints that allow the refs parameter.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-02-18T00:31:12+00:00","modified":"2026-02-18T18:31:39+00:00","when":"2026-02-18T00:31:12+00:00","text":"**Summary:**\nMandiant Digital Threat Monitoring customers may see HTTP 404 Not Found error when viewing alerts through the web console or API.\n**Description:**\nA temporary data event in part of our system is causing Digital Threat Monitoring alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST to be unavailable. When a customer attempts to view one of these alerts, they may receive an HTTP 404 Not Found error.\nOur engineering team continues to actively work to restore the availability of these alerts. At this time, the majority of the previously unavailable alerts have been restored. However, customers may still receive errors when viewing the small percentage that have not yet been restored. At this time we do not have an estimated completion for restoring the remaining alerts.\nWe will provide the next update on Wednesday, 2026-02-18 17:00 PST.\n**Customer Symptoms:**\nCustomers may be unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST and instead will receive an HTTP 404 Not Found error.\n**Workaround:**\nAPI users can set the query parameter refs=false for all endpoints that allow the refs parameter.\nAt this stage, there is no known workaround for viewing alert details via the UI or for other API endpoints.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-02-17T00:19:51+00:00","modified":"2026-02-18T00:31:12+00:00","when":"2026-02-17T00:19:51+00:00","text":"**Summary:**\nMandiant Digital Threat Monitoring customers may see HTTP 404 Not Found error when viewing alerts through the web console or API.\n**Description:**\nA temporary data event in part of our system is causing Digital Threat Monitoring alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST to be unavailable. When a customer attempts to view one of these alerts, they may receive an HTTP 404 Not Found error.\nOur engineering team continues to actively work to restore the availability of these alerts. At this time, the majority of the previously unavailable alerts have been restored. However, customers may still receive errors when viewing the small percentage that have not yet been restored. At this time we do not have an estimated completion for restoring the remaining alerts.\nWe will provide the next update on Tuesday, 2026-02-17 17:00 PST.\n**Customer Symptoms:**\nCustomers may be unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST and instead will receive an HTTP 404 Not Found error.\n**Workaround:**\nAPI users can set the query parameter refs=false for all endpoints that allow the refs parameter.\nAt this stage, there is no known workaround for viewing alert details via the UI or for other API endpoints.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-02-15T18:17:02+00:00","modified":"2026-02-17T00:19:51+00:00","when":"2026-02-15T18:17:02+00:00","text":"### Summary:\nMandiant Digital Threat Monitoring customers may see HTTP 404 Not Found error when viewing alerts through the web console or API.\n### Description:\nA temporary data event in part of our system is causing Digital Threat Monitoring alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST to be unavailable. When a customer attempts to view one of these alerts, they may receive an HTTP 404 Not Found error.\nOur engineering team continues to actively work to restore the availability of these alerts. The estimated time at which all alerts will be restored is Monday, 2026-02-16 17:00 PST.\nWe will provide the next update on Monday, 2026-02-16 17:00 PST.\n### Customer Symptoms:\nCustomers may be unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST and instead will receive an HTTP 404 Not Found error.\n### Workaround:\nAPI users can set the query parameter refs=false for all endpoints that allow the refs parameter.\nAt this stage, there is no known workaround for viewing alert details via the UI or for other API endpoints.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-02-14T19:55:24+00:00","modified":"2026-02-15T18:17:02+00:00","when":"2026-02-14T19:55:24+00:00","text":"### Summary:\nMandiant Digital Threat Monitoring customers may see HTTP 404 Not Found error when viewing alerts through the web console or API.\n### Description:\nA temporary data event in part of our system is causing Digital Threat Monitoring alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST to be unavailable. When a customer attempts to view one of these alerts, they may receive an HTTP 404 Not Found error.\nOur engineering team continues to actively work to restore the availability of these alerts.\nWe will provide the next update on Sunday, 2026-02-15 12:00 PST.\n### Customer Symptoms:\nCustomers may be unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST and instead will receive an HTTP 404 Not Found error.\n### Workaround:\nAPI users can set the query parameter refs=false for all endpoints that allow the refs parameter.\nAt this stage, there is no known workaround for viewing alert details via the UI or for other API endpoints.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-02-10T08:59:29+00:00","modified":"2026-02-14T20:18:42+00:00","when":"2026-02-10T08:59:29+00:00","text":"### Summary:\nMandiant Digital Threat Monitoring customers may see HTTP 404 Not Found error when viewing alerts through the web console or API.\n### Description:\nA temporary data event in part of our system is causing Digital Threat Monitoring alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST to be unavailable. When a customer attempts to view one of these alerts, they may receive an HTTP 404 Not Found error.\nOur engineering team continues to actively work to restore the availability of these alerts.\nWe will provide the next update on Saturday, 2026-02-14 12:00 PST.\n### Customer Symptoms:\nCustomers may be unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST, and instead will receive an HTTP 404 Not Found error.\n### Workaround:\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-02-18T18:31:39+00:00","modified":"2026-02-18T18:31:40+00:00","when":"2026-02-18T18:31:39+00:00","text":"**Summary:**\nMandiant Digital Threat Monitoring customers may have experienced issues in receiving emails or new alerts, and may have seen HTTP 404 Not Found error when viewing alerts through the web console or API.\n**Description:**\nThe issue with Mandiant Digital Threat Monitoring has been resolved as of 2026-02-18 at 09:00 US/Pacific.\n**Customer Symptoms:**\nCustomers were unable to view alerts generated between Monday, 2026-02-09 14:30 PST and Tuesday, 2026-02-10 21:30 PST and received an HTTP 404 Not Found error.\n**Workaround:**\nAPI users were able to set the query parameter refs=false for all endpoints that allow the refs parameter.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"dgtVvWgKSlxi01VBC8mt","service_name":"Mandiant Digital Threat Monitoring","affected_products":[{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"}],"uri":"incidents/nuU89kS9ifqo12fEqPJr","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"P7rUC1F4VZVut6M5fVJC","number":"12869950950656810848","begin":"2026-02-05T23:46:00+00:00","created":"2026-02-06T14:41:41+00:00","end":"2026-02-06T15:00:00+00:00","modified":"2026-02-06T15:04:28+00:00","external_desc":"Some Google SecOps US customers may observe ingestion and detection delay for CS_ALERTS logs.","updates":[{"created":"2026-02-06T15:04:26+00:00","modified":"2026-02-06T15:04:28+00:00","when":"2026-02-06T15:04:26+00:00","text":"**Summary**\nSome Google SecOps US customers might observe ingestion and detection delay for CS_ALERTS logs.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2026-02-06 07:00 PST.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nSome Google SecOps customers might have noticed an ingestion delay for CS_ALERTS logs in the US region. There might also have been some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone as the issue is now resolved.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-02-06T14:41:41+00:00","modified":"2026-02-06T15:04:26+00:00","when":"2026-02-06T14:41:41+00:00","text":"**Summary**\nSome Google SecOps US customers may observe ingestion and detection delay for CS_ALERTS logs.\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Thursday, 2026-02-05 15:46 PST.\nOur engineering team has already identified the issue and mitigation is in progress.\nWe will provide an update by Friday, 2026-02-06 07:15 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nSome Google SecOps customers may have noticed an ingestion delay for CS_ALERTS logs in the US region. There may also have been some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-02-06T15:04:26+00:00","modified":"2026-02-06T15:04:28+00:00","when":"2026-02-06T15:04:26+00:00","text":"**Summary**\nSome Google SecOps US customers might observe ingestion and detection delay for CS_ALERTS logs.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2026-02-06 07:00 PST.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nSome Google SecOps customers might have noticed an ingestion delay for CS_ALERTS logs in the US region. There might also have been some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone as the issue is now resolved.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/P7rUC1F4VZVut6M5fVJC","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"6RQbu9GCPnQiVoJqHBUJ","number":"13067790619221415769","begin":"2026-02-04T19:26:00+00:00","created":"2026-02-04T21:13:37+00:00","end":"2026-02-04T23:31:00+00:00","modified":"2026-02-04T23:27:06+00:00","external_desc":"Investigating an intermittent issue with Google SecOps Gemini “Generate Query” functionality in europe-west3 and US multi-region.","updates":[{"created":"2026-02-04T23:26:59+00:00","modified":"2026-02-04T23:27:06+00:00","when":"2026-02-04T23:26:59+00:00","text":"**Summary**\nGoogle SecOps Gemini “Generate Query” functionality might have experienced elevated errors in europe-west3 and US multi-region.\n**Description**\nThe issue with Google SecOps has been resolved for all affected projects as of Wednesday, 2026-02-04 15:301 PST.\nFrom preliminary analysis, the issue was triggered due to insufficient resource configuration in the impacted regions, resulting in resource exhausted errors.\nOur engineers mitigated the issue by increasing resources. We will add retries and additional notifications in advance of resource issues in the future.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nAffected customers might have experienced “Sorry, Gemini is currently unavailable. Contact support if this persists” error message when attempting to use “Generate Query” functionality.\n**Workaround**\nThis incident is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-02-04T22:52:54+00:00","modified":"2026-02-04T23:26:59+00:00","when":"2026-02-04T22:52:54+00:00","text":"**Summary**\nGoogle SecOps Gemini “Generate Query” functionality is experiencing elevated errors in europe-west3 and US multi-region.\n**Description**\nMitigation work is currently underway by our engineering team.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Wednesday, 2026-02-04 15:30 PST.\n**Symptoms**\nAffected customers are experiencing “Sorry, Gemini is currently unavailable. Contact support if this persists” error message when attempting to use “Generate Query” functionality.\n**Workaround**\nCustomers can retry executing the “Generate Query” functionality.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-02-04T21:13:37+00:00","modified":"2026-02-04T22:52:54+00:00","when":"2026-02-04T21:13:37+00:00","text":"**Summary:**\nInvestigating an intermittent issue with Google SecOps Gemini “Generate Query” functionality in europe-west3 and US multi-region.\n**Description:**\nWe are experiencing an intermittent issue with Google SecOps Gemini Query generation beginning on Wednesday, 2026-02-04 11:26 PST.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Wednesday, 2026-02-04 14:30 PST with current details.\n**Symptoms:**\nAffected customers are experiencing “Sorry, Gemini is currently unavailable. Contact support if this persists” error message when attempting to use “Generate Query” functionality.\n**Workaround:**\nCustomers can retry executing the “Generate Query” functionality.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2026-02-04T23:26:59+00:00","modified":"2026-02-04T23:27:06+00:00","when":"2026-02-04T23:26:59+00:00","text":"**Summary**\nGoogle SecOps Gemini “Generate Query” functionality might have experienced elevated errors in europe-west3 and US multi-region.\n**Description**\nThe issue with Google SecOps has been resolved for all affected projects as of Wednesday, 2026-02-04 15:301 PST.\nFrom preliminary analysis, the issue was triggered due to insufficient resource configuration in the impacted regions, resulting in resource exhausted errors.\nOur engineers mitigated the issue by increasing resources. We will add retries and additional notifications in advance of resource issues in the future.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nAffected customers might have experienced “Sorry, Gemini is currently unavailable. Contact support if this persists” error message when attempting to use “Generate Query” functionality.\n**Workaround**\nThis incident is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/6RQbu9GCPnQiVoJqHBUJ","currently_affected_locations":[],"previously_affected_locations":[{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Multi-region: us","id":"us"}]},{"id":"JLVDftY1pzg8uCmfnPsp","number":"15253767140130474155","begin":"2026-01-28T23:29:00+00:00","created":"2026-01-29T00:15:59+00:00","end":"2026-01-29T01:15:00+00:00","modified":"2026-01-29T01:37:25+00:00","external_desc":"Mandiant Managed Defense customers may have experienced SSO login redirection issues.","updates":[{"created":"2026-01-29T01:24:50+00:00","modified":"2026-01-29T01:24:50+00:00","when":"2026-01-29T01:24:50+00:00","text":"## Summary\nMandiant Managed Defense customers may have experienced SSO login redirection issues.\n## Description\nThe issue with Mandiant Managed Defense has been resolved for all affected users as of Wednesday, 2026-01-28 17:15 PST.\nOur engineering team identified the recent incorrect configuration changes causing this and mitigated the impact by rolling back these changes.\nWe thank you for your patience while we worked on resolving the issue.\n## Customer Symptoms\nImpacted customers may have experienced Mandiant SSO logins failures to login to the following:\n* md.mandiant.com\n* advantage.mandiant.com\nMandiant Advantage Threat Intelligence, Mandiant Attack Surface Management, Mandiant Digital Threat Monitoring customers that use External Identity Federation to login may have experienced login failures.\n## Workaround\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-01-29T01:12:30+00:00","modified":"2026-01-29T01:24:50+00:00","when":"2026-01-29T01:12:30+00:00","text":"## Summary\nMandiant Managed Defense customers are experiencing SSO login redirection issues.\n## Description\nMitigation work is currently underway by our engineering team.\nWe do not have an ETA for mitigation at this point.\nWe will provide more information by Wednesday, 2026-01-28 18:30 PST.\n## Customer Symptoms\nImpacted customers may experience Mandiant SSO logins failures to login to the following:\n* md.mandiant.com\n* advantage.mandiant.com\nMandiant Advantage Threat Intelligence, Mandiant Attack Surface Management, Mandiant Digital Threat Monitoring customers that use External Identity Federation to login may experience login failures.\n## Workaround\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-01-29T00:15:59+00:00","modified":"2026-01-29T01:37:25+00:00","when":"2026-01-29T00:15:59+00:00","text":"## Summary\nMandiant Managed Defense customers are experiencing SSO login redirection issues.\n## Description\nWe are experiencing an issue with Mandiant Managed Defense beginning on Wednesday, 2026-01-28 15:29 PST.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2026-01-28 16:45 PST with current details.\nWe apologize to all who are affected by the disruption.\n## Customer Symptoms\nImpacted customers may experience Mandiant SSO logins failures to login to the following:\n* md.mandiant.com\n* advantage.mandiant.com\n## Workaround\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-01-29T01:24:50+00:00","modified":"2026-01-29T01:24:50+00:00","when":"2026-01-29T01:24:50+00:00","text":"## Summary\nMandiant Managed Defense customers may have experienced SSO login redirection issues.\n## Description\nThe issue with Mandiant Managed Defense has been resolved for all affected users as of Wednesday, 2026-01-28 17:15 PST.\nOur engineering team identified the recent incorrect configuration changes causing this and mitigated the impact by rolling back these changes.\nWe thank you for your patience while we worked on resolving the issue.\n## Customer Symptoms\nImpacted customers may have experienced Mandiant SSO logins failures to login to the following:\n* md.mandiant.com\n* advantage.mandiant.com\nMandiant Advantage Threat Intelligence, Mandiant Attack Surface Management, Mandiant Digital Threat Monitoring customers that use External Identity Federation to login may have experienced login failures.\n## Workaround\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"zall","service_name":"Multiple Products","affected_products":[{"title":"Mandiant Advantage Threat Intelligence","id":"Dvtt8cwUdpUYoGMpt2Fc"},{"title":"Mandiant Attack Surface Management","id":"v7DL2fMFnZpCxNwd8KE7"},{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"},{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/JLVDftY1pzg8uCmfnPsp","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"tSD5Tz5xEX6rfntpHV4q","number":"7675257162571177894","begin":"2026-01-19T10:07:00+00:00","created":"2026-01-19T12:25:58+00:00","end":"2026-01-19T10:24:00+00:00","modified":"2026-01-19T12:36:35+00:00","external_desc":"Google SecOps SIEM customers may have experienced unavailability of Feeds, Forwarder and Parser management pages in europe-west3 region.","updates":[{"created":"2026-01-19T12:36:32+00:00","modified":"2026-01-19T12:36:35+00:00","when":"2026-01-19T12:36:32+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected users. The impact lasted between Monday, 2026-01-19 02:07 to 02:54 PST.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers may have experienced unavailability of Feeds, Forwarder and Parser management pages.\nThere was an impact on the push-based ingestion RPCs in the region for europe-west-3 during the period of time.\n**Workaround**\nThe impact is now mitigated","status":"AVAILABLE","affected_locations":[]},{"created":"2026-01-19T12:25:58+00:00","modified":"2026-01-19T12:36:32+00:00","when":"2026-01-19T12:25:58+00:00","text":"**Description**\nWe experienced an issue with Google SecOps between Monday, 2026-01-19 02:07 to 02:54 PST.\nCustomers may have experienced unavailability of Feeds, Forwarder and Parser management pages.\nThere was an impact on the push-based ingestion RPCs in the region for europe-west-3 during the period of time.\nWe will provide an update by Monday, 2026-01-19 05:00 PST with current details.\nWe apologize to all who are affected by this disruption\n**Symptoms**\nCustomers may have experienced unavailability of Feeds, Forwarder and Parser management pages.\nThere was an impact on the push-based ingestion RPCs in the region for europe-west-3 during the period of time.\n**Workaround**\nThe impact is now mitigated","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Frankfurt (europe-west3)","id":"europe-west3"}]}],"most_recent_update":{"created":"2026-01-19T12:36:32+00:00","modified":"2026-01-19T12:36:35+00:00","when":"2026-01-19T12:36:32+00:00","text":"**Description**\nThe issue with Google SecOps has been resolved for all affected users. The impact lasted between Monday, 2026-01-19 02:07 to 02:54 PST.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers may have experienced unavailability of Feeds, Forwarder and Parser management pages.\nThere was an impact on the push-based ingestion RPCs in the region for europe-west-3 during the period of time.\n**Workaround**\nThe impact is now mitigated","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/tSD5Tz5xEX6rfntpHV4q","currently_affected_locations":[],"previously_affected_locations":[{"title":"Frankfurt (europe-west3)","id":"europe-west3"}]},{"id":"LmVUwo4hbpSu1xyzVAs5","number":"7030869524572864172","begin":"2026-01-15T08:00:00+00:00","created":"2026-02-11T19:03:04+00:00","end":"2026-02-17T20:58:00+00:00","modified":"2026-02-17T21:41:46+00:00","external_desc":"[Informational] Google SecOps customers may have experienced staleness with Entity Context Graph (ECG) \"first seen\" and \"last seen\" timestamps. Only “Domain”, “file hash” and “IP address” identifiers were impacted.","updates":[{"created":"2026-02-17T21:41:46+00:00","modified":"2026-02-17T21:41:46+00:00","when":"2026-02-17T21:41:46+00:00","text":"The issue with Google SecOps has been resolved for all affected customers as of Tuesday, 2025-02-17 12:58 US/Pacific.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\n* Any threat detection rules that used Entity Context Graph (ECG) “first seen” or “last seen” timestamps may not have found accurate recent matches.\n* Only “Domain”, “file hash” and “IP address” identifiers were impacted.\n* Any entities that were first seen before Jan 15th, their “first seen” timestamps were still accurate.\n* Displayed search results of “first seen” and “last seen” timestamps for entities may have been stale.\n**Workaround**\nA workaround was not available.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-02-12T21:12:41+00:00","modified":"2026-02-17T21:41:46+00:00","when":"2026-02-12T21:12:41+00:00","text":"We are experiencing an issue with Google SecOps, beginning on Thursday, 2026-01-15.\nMitigation work is ongoing and the mitigation is expected to complete by Friday, 2026-02-20.\nThe staleness with search and display results of “first seen” and “last seen” timestamps for entities is now resolved in asia-northeast1, asia-south1, europe-west3, europe-west6, northamerica-northeast2, southamerica-east1.\nWe will provide more information by Tuesday, 2026-02-17 14:00 US/Pacific with current details.\n**Customer Symptoms**\n* Any threat detection rules that use Entity Context Graph (ECG) “first seen” or “last seen” timestamps may not have found accurate recent matches.\n* Displayed search results of “first seen” and “last seen” timestamps for entities may be stale.\n* Only “Domain”, “file hash” and “IP address” identifiers are impacted at this time.\n* Any entities that were first seen before Jan 15th, their “first seen” timestamps are still accurate.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-02-12T20:22:22+00:00","modified":"2026-02-12T21:12:41+00:00","when":"2026-02-12T20:22:22+00:00","text":"We are experiencing an issue with Google SecOps, beginning on Thursday, 2026-01-15.\nMitigation work is currently underway by our engineering team.\nWe will provide more information by Thursday, 2026-02-12 16:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\n* Any threat detection rules that use Entity Context Graph (ECG) “first seen” or “last seen” timestamps may not have found accurate recent matches.\n* Displayed search results of “first seen” and “last seen” timestamps for entities may be stale.\n* Only “Domain”, “file hash” and “IP address” identifiers are impacted at this time.\n* Any entities that were first seen before Jan 15th, their “first seen” timestamps are still accurate.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2026-02-11T19:03:04+00:00","modified":"2026-02-12T20:22:22+00:00","when":"2026-02-11T19:03:04+00:00","text":"We are experiencing an issue with Google SecOps, beginning on Thursday, 2026-01-15.\nMitigation work is currently underway by our engineering team.\nWe will provide more information by Thursday, 2026-02-12 12:00 US/Pacific with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\n* Any threat detection rules that use Entity Context Graph (ECG) “first seen” or “last seen” timestamps may not have found accurate recent matches.\n* Displayed search results of “first seen” and “last seen” timestamps for entities may be stale.\n* Only “Domain”, “file hash” and “IP address” identifiers are impacted at this time.\n* Any entities that were first seen before Jan 15th, their “first seen” timestamps are still accurate.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[]}],"most_recent_update":{"created":"2026-02-17T21:41:46+00:00","modified":"2026-02-17T21:41:46+00:00","when":"2026-02-17T21:41:46+00:00","text":"The issue with Google SecOps has been resolved for all affected customers as of Tuesday, 2025-02-17 12:58 US/Pacific.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\n* Any threat detection rules that used Entity Context Graph (ECG) “first seen” or “last seen” timestamps may not have found accurate recent matches.\n* Only “Domain”, “file hash” and “IP address” identifiers were impacted.\n* Any entities that were first seen before Jan 15th, their “first seen” timestamps were still accurate.\n* Displayed search results of “first seen” and “last seen” timestamps for entities may have been stale.\n**Workaround**\nA workaround was not available.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/LmVUwo4hbpSu1xyzVAs5","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"3mmPY7ZSZdZ8BZXdzfCr","number":"15895530595853864577","begin":"2026-01-06T03:50:00+00:00","created":"2026-01-06T05:08:54+00:00","end":"2026-01-06T17:00:00+00:00","modified":"2026-01-06T18:00:46+00:00","external_desc":"Mandiant Digital Threat Monitoring customers experienced elevated 431 errors.","updates":[{"created":"2026-01-06T17:59:29+00:00","modified":"2026-01-06T18:00:38+00:00","when":"2026-01-06T17:59:29+00:00","text":"**Summary**\nMandiant Digital Threat Monitoring customers experienced elevated 431 errors.\n**Description:**\nThe issue with Mandiant Digital Threat Monitoring has been resolved for all affected users as of Tuesday, 2025-01-06 09:00 US/Pacific.\nA recent update to the underlying hosting service caused our authentication request sizes to exceed standard platform constraints. Our engineering team resolved the issue by rolling out a fix to production.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nAffected customers may have observed 431 errors while attempting to access Mandiant Digital Threat Monitoring through the Google Threat Intelligence UI.\n**Workaround:**\nNo workaround at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2026-01-06T09:06:56+00:00","modified":"2026-01-06T17:59:29+00:00","when":"2026-01-06T09:06:56+00:00","text":"**Summary**\nMandiant Attack Surface Management and Mandiant Digital Threat Monitoring customers observing error 431.\n**Description:**\nWe are experiencing an issue with Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring, beginning on Monday, 2026-01-05 19:50 PST.\nOur engineering team continues to actively investigate the root cause and is dedicated to mitigating the issue for all customers.\nWe will provide more information by Tuesday, 2026-01-06 10:00 PST with current details.\n**Symptoms:**\nThe affected customers may observe error 431 while attempting to access Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring through the Google Threat Intelligence UI.\n**Workaround:**\nNo workaround is currently available. A previously suggested step to clear cookies for advantage.mandiant.com is now believed to be ineffective for most affected customers.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-01-06T08:05:33+00:00","modified":"2026-01-06T09:06:56+00:00","when":"2026-01-06T08:05:33+00:00","text":"**Summary**\nMandiant Attack Surface Management and Mandiant Digital Threat Monitoring customers observing error 4xx.\n**Description:**\nWe are experiencing an issue with Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring, beginning on Monday, 2026-01-05 19:50 PST.\nOur engineering team continues to actively investigate the root cause and is dedicated to mitigating the issue for all customers.\nWe will provide more information by Tuesday, 2026-01-06 02:00 PST with current details.\n**Symptoms:**\nThe affected customers may observe error 4xx while attempting to access Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring through the Google Threat Intelligence UI.\n**Workaround:**\nNo workaround is currently available. A previously suggested step to clear cookies for advantage.mandiant.com is now believed to be ineffective for most affected customers.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-01-06T06:08:32+00:00","modified":"2026-01-06T08:05:33+00:00","when":"2026-01-06T06:08:32+00:00","text":"**Summary**\nMandiant Attack Surface Management and Mandiant Digital Threat Monitoring customers observing error 4xx.\n**Description:**\nWe are experiencing an issue with Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring, beginning on Monday, 2026-01-05 19:50 PST.\nOur engineering team continues to actively investigate this issue and is working diligently toward a full resolution for all affected customers.\nWe will provide more information by Tuesday, 2026-01-06 01:00 PST with current details.\n**Symptoms:**\nThe affected customers may observe error 4xx while attempting to access Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring through the Google Threat Intelligence UI.\n**Workaround:**\nTo temporarily restore access, affected customers can clear cookies for advantage.mandiant.com. Service degradation may still be observed.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-01-06T05:27:48+00:00","modified":"2026-01-06T06:08:32+00:00","when":"2026-01-06T05:27:48+00:00","text":"**Summary**\nMandiant Attack Surface Management and Mandiant Digital Threat Monitoring customers observing error 4xx.\n**Description:**\nWe are experiencing an issue with Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring, beginning on Monday, 2026-01-05 19:50 PST.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Monday, 2026-01-05 23:00 PST with current details.\n**Symptoms:**\nThe impacted customers may observe **error 4xx** while attempting to access Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring through the UI.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2026-01-06T05:08:54+00:00","modified":"2026-01-06T05:27:48+00:00","when":"2026-01-06T05:08:54+00:00","text":"We are experiencing an issue with Mandiant Attack Surface Management and Mandiant Digital Threat Monitoring, beginning on Monday, 2026-01-05 19:50 PST.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Monday, 2026-01-05 22:00 PST with current details.\nWe apologize to all who are affected by the disruption.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-01-06T17:59:29+00:00","modified":"2026-01-06T18:00:38+00:00","when":"2026-01-06T17:59:29+00:00","text":"**Summary**\nMandiant Digital Threat Monitoring customers experienced elevated 431 errors.\n**Description:**\nThe issue with Mandiant Digital Threat Monitoring has been resolved for all affected users as of Tuesday, 2025-01-06 09:00 US/Pacific.\nA recent update to the underlying hosting service caused our authentication request sizes to exceed standard platform constraints. Our engineering team resolved the issue by rolling out a fix to production.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nAffected customers may have observed 431 errors while attempting to access Mandiant Digital Threat Monitoring through the Google Threat Intelligence UI.\n**Workaround:**\nNo workaround at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"zall","service_name":"Multiple Products","affected_products":[{"title":"Mandiant Attack Surface Management","id":"v7DL2fMFnZpCxNwd8KE7"},{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"}],"uri":"incidents/3mmPY7ZSZdZ8BZXdzfCr","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"z1qvQvb9KivF2JYSM74c","number":"2022248043115994550","begin":"2025-12-23T14:46:00+00:00","created":"2025-12-23T16:30:54+00:00","end":"2025-12-23T16:49:00+00:00","modified":"2025-12-23T17:10:54+00:00","external_desc":"Google SecOps customers are experiencing failures in search queries in europe-west2 (UK) region.","updates":[{"created":"2025-12-23T17:08:55+00:00","modified":"2025-12-23T17:10:54+00:00","when":"2025-12-23T17:08:55+00:00","text":"**Summary**\nGoogle SecOps customers were experiencing failures in search queries in europe-west2 (UK) region.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2025-12-23 08:49 PST.\nThe degradation in search latency was driven by a single customer executing resource-heavy, complex UDM search queries leading to high FSU consumption in the europe-west2 region.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nUsers may have observed failures in search queries via both UI and API.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-12-23T16:30:54+00:00","modified":"2025-12-23T17:08:55+00:00","when":"2025-12-23T16:30:54+00:00","text":"**Summary**:\nGoogle SecOps customers are experiencing failures in search queries in europe-west2 (UK) region.\n**Description:**\nWe are experiencing an issue with Google SecOps, beginning on Tuesday, 2025-12-23 06:46 PST.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Tuesday, 2025-12-23 09:30 PST with details.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nUsers will observe failures in search queries via both UI and API.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"London (europe-west2)","id":"europe-west2"}]}],"most_recent_update":{"created":"2025-12-23T17:08:55+00:00","modified":"2025-12-23T17:10:54+00:00","when":"2025-12-23T17:08:55+00:00","text":"**Summary**\nGoogle SecOps customers were experiencing failures in search queries in europe-west2 (UK) region.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2025-12-23 08:49 PST.\nThe degradation in search latency was driven by a single customer executing resource-heavy, complex UDM search queries leading to high FSU consumption in the europe-west2 region.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nUsers may have observed failures in search queries via both UI and API.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/z1qvQvb9KivF2JYSM74c","currently_affected_locations":[],"previously_affected_locations":[{"title":"London (europe-west2)","id":"europe-west2"}]},{"id":"XGGezW6TAVtLYuX8Kww4","number":"12208880840865867193","begin":"2025-12-18T08:13:00+00:00","created":"2025-12-18T21:45:41+00:00","end":"2025-12-19T01:45:00+00:00","modified":"2025-12-19T01:51:08+00:00","external_desc":"Google SecOps is experiencing an issue with the UI and API.","updates":[{"created":"2025-12-19T01:51:08+00:00","modified":"2025-12-19T01:51:08+00:00","when":"2025-12-19T01:51:08+00:00","text":"**Summary**\nThe issue with Google SecOps UI and Chronicle API has been fully mitigated for all operations in the multi-region US.\n**Description**\nThe issue with Google SecOps UI and Chronicle API in the multi-region US has been fully mitigated as of Thursday, 2025-12-18 17:45 PST.\nFrom preliminary analysis, the issue was triggered by a malformed request to the updateFeed API call, which led to the update operations being rejected.\nOur engineering team has rolled out a fix to handle the malformed request to mitigate the impact. All services, including the updateFeed operations are now fully restored and working normally.\nWe thank you for your patience while we worked on resolving this issue.\n**Symptoms**\nCustomers in the US region might have experienced 5xx error while accessing Google SecOps UI and API.\n**Workaround**\nNone at the moment.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-12-19T00:57:13+00:00","modified":"2025-12-19T01:51:08+00:00","when":"2025-12-19T00:57:13+00:00","text":"**Summary**\nThe issue with Google SecOps UI and Chronicle API has been mitigated for all operations except feed update operation in the multi-region US.\n**Description**\nThe issue with Google SecOps UI and Chronicle API that began on Thursday, 2025-12-18 12:15 PST in the multi-region US has been mitigated.\nAll UI and API services are now working normally, with the exception of the Chronicle API updateFeed operation, which has been temporarily unavailable. Our engineering team continues to investigate the root cause for the feed update operation issue. We will provide an update by Thursday, 2025-12-18 18:30 PST with current details. We apologize for the inconvenience.\n**Symptoms**\nCustomers in the US region are unable to update feeds at this time.\n**Workaround**\nNone at the moment.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-18T22:53:32+00:00","modified":"2025-12-19T00:57:13+00:00","when":"2025-12-18T22:53:32+00:00","text":"**Summary**\nThe issue with Google SecOps UI and Chronicle API has been mitigated for all operations except feed update operation in the multi-region US.\n**Description**\nThe issue with Google SecOps UI and Chronicle API that began on Thursday, 2025-12-18 12:15 PST in the multi-region US has been mitigated.\nAll UI and API services are now working normally, with the exception of the Chronicle API updateFeed operation, which has been temporarily unavailable. Our engineering team continues to investigate the root cause for the feed update operation issue. We will provide an update by Thursday, 2025-12-18 17:00 PST with current details. We apologize for the inconvenience.\n**Symptoms**\nCustomers in the US region are unable to update feeds at this time.\n**Workaround**\nNone at the moment.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-18T21:45:41+00:00","modified":"2025-12-18T22:53:32+00:00","when":"2025-12-18T21:45:41+00:00","text":"**Summary**\nGoogle SecOps is experiencing an issue with the UI and API.\n**Description**\nWe are experiencing an issue with Google SecOps UI and API beginning on Thursday, 2025-12-18 00:13 PST in the multi-region US.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2025-12-18 14:45 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nCustomers in the US region would encounter 5xx error while accessing Google SecOps UI and API.\n**Workaround**\nNone at the moment.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2025-12-19T01:51:08+00:00","modified":"2025-12-19T01:51:08+00:00","when":"2025-12-19T01:51:08+00:00","text":"**Summary**\nThe issue with Google SecOps UI and Chronicle API has been fully mitigated for all operations in the multi-region US.\n**Description**\nThe issue with Google SecOps UI and Chronicle API in the multi-region US has been fully mitigated as of Thursday, 2025-12-18 17:45 PST.\nFrom preliminary analysis, the issue was triggered by a malformed request to the updateFeed API call, which led to the update operations being rejected.\nOur engineering team has rolled out a fix to handle the malformed request to mitigate the impact. All services, including the updateFeed operations are now fully restored and working normally.\nWe thank you for your patience while we worked on resolving this issue.\n**Symptoms**\nCustomers in the US region might have experienced 5xx error while accessing Google SecOps UI and API.\n**Workaround**\nNone at the moment.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/XGGezW6TAVtLYuX8Kww4","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: us","id":"us"}]},{"id":"oaZqH4QbPwJgUySP5vcq","number":"13518099635235281154","begin":"2025-12-15T17:00:00+00:00","created":"2025-12-17T23:42:26+00:00","end":"2025-12-22T17:00:00+00:00","modified":"2026-01-06T19:53:50+00:00","external_desc":"Mandiant Digital Threat Monitoring experienced delays in processing long running operations.","updates":[{"created":"2026-01-06T19:52:28+00:00","modified":"2026-01-06T19:53:18+00:00","when":"2026-01-06T19:52:28+00:00","text":"**Summary :**\nMandiant Digital Threat Monitoring experienced delays in processing long running operations.\n**Description :**\nThe issue with Mandiant Digital Threat Monitoring has been resolved for all affected users as of Friday, 2025-12-19 13:00 PST\nThe issue was due to a combination of database performance constraints and an unexpected increase in the volume of redundant background tasks. Our engineers have mitigated the issue by optimizing our processing queues to remove redundant tasks and reprocessing the remaining backlog.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms :**\n- Impacted customers may have experienced delays in alert backfills for newly created monitors.\n- Bulk updates and bulk deletions of alerts were delayed or cancelled.\n**Workaround :**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-12-20T00:45:37+00:00","modified":"2026-01-06T19:52:28+00:00","when":"2025-12-20T00:45:37+00:00","text":"**Summary :**\nMandiant Digital Threat Monitoring is experiencing delays in processing long running operations.\n**Description :**\nOur engineering team has mitigated the slow processing delays for the new jobs which are created. We are in the process of reprocessing the backlog of the jobs which were stuck in the processing.\nWe expect this to be completed by Monday, 2025-12-22 09:00 PST.\nWe will provide an update by Monday, 2025-12-22 09:30 PST with more details.\n**Customer Symptoms :**\nImpacted customers may experience delays in alert backfills for newly created monitors. Bulk updates and bulk deletions of alerts may get delayed or cancelled.\n**Workaround :**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-12-18T17:54:41+00:00","modified":"2025-12-20T00:45:37+00:00","when":"2025-12-18T17:54:41+00:00","text":"**Summary**\nMandiant Digital Threat Monitoring is experiencing delays in processing long running operations.\n**Description**\nWe are experiencing an issue with Mandiant Digital Threat Monitoring beginning on Monday, 2025-12-15 09:00 PST.\nOur engineers have identified a path forward and are preparing to begin to take action to address the processing delays.\nWe will provide an update by Friday, 2025-12-19 10:00 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nImpacted customers may experience delays in alert backfills for newly created monitors.\nBulk updates and bulk deletions of alerts may get delayed or cancelled.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-12-17T23:42:26+00:00","modified":"2025-12-18T17:54:41+00:00","when":"2025-12-17T23:42:26+00:00","text":"**Summary**\nMandiant Digital Threat Monitoring is experiencing delays in processing long running operations.\n**Description**\nWe are experiencing an issue with Mandiant Digital Threat Monitoring beginning on Monday, 2025-12-15 09:00 PST.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Thursday, 2025-12-18 10:00 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nImpacted customers may experience delays in alert backfills for newly created monitors.\nBulk updates and bulk deletions of alerts may get delayed or cancelled.\n**Workaround**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2026-01-06T19:52:28+00:00","modified":"2026-01-06T19:53:18+00:00","when":"2026-01-06T19:52:28+00:00","text":"**Summary :**\nMandiant Digital Threat Monitoring experienced delays in processing long running operations.\n**Description :**\nThe issue with Mandiant Digital Threat Monitoring has been resolved for all affected users as of Friday, 2025-12-19 13:00 PST\nThe issue was due to a combination of database performance constraints and an unexpected increase in the volume of redundant background tasks. Our engineers have mitigated the issue by optimizing our processing queues to remove redundant tasks and reprocessing the remaining backlog.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms :**\n- Impacted customers may have experienced delays in alert backfills for newly created monitors.\n- Bulk updates and bulk deletions of alerts were delayed or cancelled.\n**Workaround :**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"dgtVvWgKSlxi01VBC8mt","service_name":"Mandiant Digital Threat Monitoring","affected_products":[{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"}],"uri":"incidents/oaZqH4QbPwJgUySP5vcq","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"EZh8z9EAgFavVES7r6Qp","number":"1581152920751565427","begin":"2025-12-10T22:40:00+00:00","created":"2025-12-11T01:43:11+00:00","end":"2025-12-11T02:41:00+00:00","modified":"2025-12-11T02:48:18+00:00","external_desc":"Google SecOps customers may experience delayed ingestion for cloud based data sources for V1 feeds.","updates":[{"created":"2025-12-11T02:48:18+00:00","modified":"2025-12-11T02:48:19+00:00","when":"2025-12-11T02:48:18+00:00","text":"**Summary**\nGoogle SecOps customers experienced delayed ingestion for cloud based data sources for V1 feeds\n**Description**\nThe issue with Google SecOps has been resolved for all affected projects as of Wednesday, 2025-12-10 18:41 PST.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have noticed an ingestion delay for cloud-based V1 feeds. There may also have been some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-12-11T02:21:16+00:00","modified":"2025-12-11T02:48:18+00:00","when":"2025-12-11T02:21:16+00:00","text":"**Summary**\nGoogle SecOps customers may experience delayed ingestion for cloud based data sources for V1 feeds\n**Description**\nOur engineers have identified the root cause and have a mitigation in place. For storage based feeds, we are seeing near complete recovery. Queue based feeds are still improving.\nWe will provide an update on the backlog burn by Wednesday, 2025-12-10 19:30 PST with current details.\n**Customer Symptoms**\nCustomers may notice an ingestion delay for cloud-based V1 feeds. There may also be some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-11T01:43:11+00:00","modified":"2025-12-11T02:21:16+00:00","when":"2025-12-11T01:43:11+00:00","text":"**Summary**\nGoogle SecOps customers may experience delayed ingestion for cloud based data sources for V1 feeds\n**Description**\nWe are experiencing an issue with Google SecOps beginning on Wednesday, 2025-12-10 14:40 PST.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Wednesday, 2025-12-10 18:30 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nCustomers may notice an ingestion delay for cloud-based V1 feeds. There may also be some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[]}],"most_recent_update":{"created":"2025-12-11T02:48:18+00:00","modified":"2025-12-11T02:48:19+00:00","when":"2025-12-11T02:48:18+00:00","text":"**Summary**\nGoogle SecOps customers experienced delayed ingestion for cloud based data sources for V1 feeds\n**Description**\nThe issue with Google SecOps has been resolved for all affected projects as of Wednesday, 2025-12-10 18:41 PST.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nCustomers may have noticed an ingestion delay for cloud-based V1 feeds. There may also have been some delay in detections and alerts as a consequence of the delayed ingestion.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/EZh8z9EAgFavVES7r6Qp","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Warsaw (europe-central2)","id":"europe-central2"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"ejDTAuB7k92Rq5CZ4j5A","number":"8294257220181135469","begin":"2025-12-09T16:51:00+00:00","created":"2025-12-09T18:52:55+00:00","end":"2025-12-10T05:54:00+00:00","modified":"2025-12-10T06:01:23+00:00","external_desc":"Google SecOps customers may experience delayed ingestion for Workspace data via native integration.","updates":[{"created":"2025-12-10T06:00:56+00:00","modified":"2025-12-10T06:01:23+00:00","when":"2025-12-10T06:00:56+00:00","text":"**Summary :** Google SecOps customers experienced delayed ingestion for Workspace data via native integration.\n**Description :**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2025-12-09 21:54 PT.\nOur engineering team has root caused and applied a stable mitigation. The native workspace ingestion is active now and the ingestion backlog is cleared as well.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms :**\nThe impacted Google SecOps customers experienced delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion was not impacted.\n**Workaround :**\nNone as the issue stands resolved","status":"AVAILABLE","affected_locations":[]},{"created":"2025-12-10T04:45:12+00:00","modified":"2025-12-10T06:00:56+00:00","when":"2025-12-10T04:45:12+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nOur engineering team has root caused and applied a stable mitigation. The native workspace ingestion feed is active now and data ingestion has resumed. Customers may still notice delays in new arriving data as we work through our backlog.\nWe have scaled up the backlog burn rate. The projected ETA for completing the backfill is Wednesday, 2025-12-10 03:30 PST.\nWe will provide an update by Wednesday, 2025-12-10 04:00 PST with current details.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nFor immediate ingestion of WORKSPACE_ACTIVITY data one can create a Third Party API feed for WORKSPACE_ACTIVITY in parallel. https://docs.cloud.google.com/chronicle/docs/reference/feed-management-api#workspace-activity","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-10T03:05:00+00:00","modified":"2025-12-10T04:45:12+00:00","when":"2025-12-10T03:05:00+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nOur engineering team has root caused and applied a stable mitigation. The native workspace ingestion feed is active now and data ingestion has resumed. Customers may still notice delays in new arriving data as we work through our backlog.\nWe are working on scaling up the backlog burn rate and we will provide the ETA for completing the backfill by Tuesday, 2025-12-09 21:00 PST.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nFor immediate ingestion of WORKSPACE_ACTIVITY data one can create a Third Party API feed for WORKSPACE_ACTIVITY in parallel. https://docs.cloud.google.com/chronicle/docs/reference/feed-management-api#workspace-activity","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-10T02:03:35+00:00","modified":"2025-12-10T03:05:00+00:00","when":"2025-12-10T02:03:35+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nOur engineering team is actively investigating the root cause while continuing to work on mitigating the issue.\nWe will provide an update by Tuesday, 2025-12-09 20:15 PST with current details.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nFor immediate ingestion of WORKSPACE_ACTIVITY data one can create a Third Party API feed for WORKSPACE_ACTIVITY in parallel. https://docs.cloud.google.com/chronicle/docs/reference/feed-management-api#workspace-activity","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-09T21:57:14+00:00","modified":"2025-12-10T02:03:35+00:00","when":"2025-12-09T21:57:14+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nMitigation work is currently underway by our engineering team.\nWe will provide an update by Tuesday, 2025-12-09 18:15 PST with current details.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nFor immediate ingestion of WORKSPACE_ACTIVITY data one can create a Third Party API feed for WORKSPACE_ACTIVITY in parallel.\nhttps://docs.cloud.google.com/chronicle/docs/reference/feed-management-api#workspace-activity","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-09T20:27:46+00:00","modified":"2025-12-09T21:57:14+00:00","when":"2025-12-09T20:27:46+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nWe are experiencing an issue with Google SecOps beginning on Tuesday, 2025-12-09 08:51 PST.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2025-12-09 14:00 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-09T19:11:02+00:00","modified":"2025-12-09T20:27:46+00:00","when":"2025-12-09T19:11:02+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nWe are experiencing an issue with Google SecOps beginning on Tuesday, 2025-12-09 08:51 PST.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2025-12-09 12:30 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-12-09T18:52:55+00:00","modified":"2025-12-09T19:11:02+00:00","when":"2025-12-09T18:52:55+00:00","text":"**Summary :** Google SecOps customers may experience delayed ingestion for Workspace data via native integration.\n**Description :**\nWe are experiencing an issue with Google SecOps beginning on Tuesday, 2025-12-09 08:51 PST.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2025-12-09 11:15 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms :**\nThe impacted Google SecOps customers may experience delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion is not impacted.\n**Workaround :**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2025-12-10T06:00:56+00:00","modified":"2025-12-10T06:01:23+00:00","when":"2025-12-10T06:00:56+00:00","text":"**Summary :** Google SecOps customers experienced delayed ingestion for Workspace data via native integration.\n**Description :**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2025-12-09 21:54 PT.\nOur engineering team has root caused and applied a stable mitigation. The native workspace ingestion is active now and the ingestion backlog is cleared as well.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms :**\nThe impacted Google SecOps customers experienced delayed ingestion for Workspace data via native integration. The Workspace data through API based ingestion was not impacted.\n**Workaround :**\nNone as the issue stands resolved","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/ejDTAuB7k92Rq5CZ4j5A","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"kWKB2qnWpPpvogWyHwE4","number":"1371833875726655340","begin":"2025-11-17T04:27:00+00:00","created":"2025-11-17T05:50:14+00:00","end":"2025-11-17T05:38:00+00:00","modified":"2025-11-17T06:07:42+00:00","external_desc":"[Mitigated] Google SecOps customers were experiencing failures in programmatic access of udmSearch API in multiple regions.","updates":[{"created":"2025-11-17T05:56:26+00:00","modified":"2025-11-17T05:57:30+00:00","when":"2025-11-17T05:56:26+00:00","text":"**Summary:**\n[Mitigated] Google SecOps customers were experiencing failures in programmatic access of udmSearch API in multiple regions.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Sunday, 2025-11-16 21:38 PST.\nThis issue was due to a configuration change. Our engineers have mitigated the issue by rolling back the configuration to the previous version.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nThe customers in the impacted regions might have observed failures during programmatic access of udmSearch API.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-11-17T05:50:14+00:00","modified":"2025-11-17T06:07:42+00:00","when":"2025-11-17T05:50:14+00:00","text":"**Summary:**\nGoogle SecOps customers are experiencing failures in programmatic access of udmSearch API in multiple regions.\n**Description**\nWe are experiencing an issue with Google SecOps, beginning on Sunday, 2025-11-16 20:27 PST.\nOur engineering team continues to investigate the issue.\nWe will provide more information by Sunday, 2025-11-16 22:30 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Symptoms**\nThe customers in the impacted regions may observe failures during programmatic access of udmSearch API.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]}],"most_recent_update":{"created":"2025-11-17T05:56:26+00:00","modified":"2025-11-17T05:57:30+00:00","when":"2025-11-17T05:56:26+00:00","text":"**Summary:**\n[Mitigated] Google SecOps customers were experiencing failures in programmatic access of udmSearch API in multiple regions.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Sunday, 2025-11-16 21:38 PST.\nThis issue was due to a configuration change. Our engineers have mitigated the issue by rolling back the configuration to the previous version.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nThe customers in the impacted regions might have observed failures during programmatic access of udmSearch API.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/kWKB2qnWpPpvogWyHwE4","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]},{"id":"ADpMn2nYWFLnAJyRkFrf","number":"3432521768427260599","begin":"2025-11-06T23:00:00+00:00","created":"2025-11-14T20:17:12+00:00","end":"2025-11-15T23:17:00+00:00","modified":"2025-11-15T23:33:04+00:00","external_desc":"Delay in processing single event rules in few regions","updates":[{"created":"2025-11-15T23:32:13+00:00","modified":"2025-11-15T23:33:04+00:00","when":"2025-11-15T23:32:13+00:00","text":"**Summary**\nWe have mitigated an issue related to the missed processing of single event rules.\n**Description**\nThe issue with Google SecOps, where single event rule processing was missed for some regions, has been resolved for all affected users as of Saturday, 2025-11-15 at 15:17.\nWe have successfully completed rule reprocessing between event time Thursday, 2025-11-06 15:00 PST and Friday, 2025-11-14 13:00 PST, that were previously affected by this issue.\nFrom preliminary analysis, the incident was triggered by a configuration issue that resulted in an insufficient amount of jobs to process rules.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers may have observed a delay affecting single event rules that were processed between Thursday, 2025-11-06 15:00 PST and Friday, 2025-11-14 13:00 PST.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-11-14T22:49:18+00:00","modified":"2025-11-15T23:32:13+00:00","when":"2025-11-14T22:49:18+00:00","text":"**Summary**\nMissed processing single event rules for a few regions\n**Description**\nWe are experiencing an issue with Google SecOps. Single event rule processing was missed for some regions, beginning on Thursday, 2025-11-06 at 15:00 PST.\nOur engineering team has identified and successfully mitigated the underlying issue. Single event rule processing after Friday, 2025-11-14 at 13:00 PST has resumed and will not be missed.\nWe will continue to work on reprocessing rules between Thursday, 2025-11-06 15:00 PST and Friday, 2025-11-14 13:00 PST, that were previously affected by this issue.\nWe will provide an update by Saturday, 2025-11-15 15:00 PST with details.\n**Symptoms**\nCustomers may observe a delay in processing single event rules that were processed between Thursday, 2025-11-06 15:00 PST and Friday, 2025-11-14 13:00 PST.\n**Workaround**\nCustomers can run retrohunts on specific rules as a workaround.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"}]},{"created":"2025-11-14T20:17:12+00:00","modified":"2025-11-14T22:49:18+00:00","when":"2025-11-14T20:17:12+00:00","text":"**Summary :** Delay in processing single event rules in few regions\n**Description :**\nWe are experiencing an issue with Google SecOps, while processing single event rules within certain regions, beginning on Thursday, 2025-11-06 at 18:03 PST.\nOur engineering team continues to investigate the issue. We will provide an update by Friday, 2025-11-14 14:00 PST with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms :**\nCustomers may notice a delay in processing single event rules and see higher than usual detection latency.\n**Workaround :**\nCustomers can run retrohunts on specific rules as a workaround.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"}]}],"most_recent_update":{"created":"2025-11-15T23:32:13+00:00","modified":"2025-11-15T23:33:04+00:00","when":"2025-11-15T23:32:13+00:00","text":"**Summary**\nWe have mitigated an issue related to the missed processing of single event rules.\n**Description**\nThe issue with Google SecOps, where single event rule processing was missed for some regions, has been resolved for all affected users as of Saturday, 2025-11-15 at 15:17.\nWe have successfully completed rule reprocessing between event time Thursday, 2025-11-06 15:00 PST and Friday, 2025-11-14 13:00 PST, that were previously affected by this issue.\nFrom preliminary analysis, the incident was triggered by a configuration issue that resulted in an insufficient amount of jobs to process rules.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms**\nCustomers may have observed a delay affecting single event rules that were processed between Thursday, 2025-11-06 15:00 PST and Friday, 2025-11-14 13:00 PST.\n**Workaround**\nThe issue is now mitigated.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/ADpMn2nYWFLnAJyRkFrf","currently_affected_locations":[],"previously_affected_locations":[{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"}]},{"id":"7WCNAQPiBAxm2cCq3rBX","number":"14716511421744837992","begin":"2025-10-30T17:00:00+00:00","created":"2025-10-30T23:51:40+00:00","end":"2025-11-07T23:00:00+00:00","modified":"2025-11-08T01:07:06+00:00","external_desc":"Some Google SecOps customers are experiencing delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.","updates":[{"created":"2025-11-08T01:06:24+00:00","modified":"2025-11-08T01:07:06+00:00","when":"2025-11-08T01:06:24+00:00","text":"**Summary**\nSome Google SecOps customers may have experienced delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.\n**Description**\nApplied Threat Intelligence - Curated Prioritization rule sets were inadvertently disabled due to defective code. The defective code has been remediated.\nWe restored the prior ‘enabled status’ and ‘alerting status’ of these rules. Reprocessing of these rules has now completed successfully.\nWe thank you for your patience while we worked on resolving the issue.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-11-01T01:10:20+00:00","modified":"2025-11-08T01:06:24+00:00","when":"2025-11-01T01:10:20+00:00","text":"**Summary**\nSome Google SecOps customers experienced delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.\n**Description**\nApplied Threat Intelligence - Curated Prioritization rule sets were inadvertently disabled due to defective code. The defective code has been remediated.\nWe have restored the prior ‘enabled status’ and ‘alerting status’ of these rules. Reprocessing of these rules has also commenced and we expect this to take up to a week.\nIf you have updated your rule configuration in the interim, reprocessed events will adhere to your new configuration.\nWe will provide more information on the status of the reprocessing by Friday, 2025-11-07 17:00 PST with current details.\n**Customer Symptoms** N/A\n**Workaround**\nN/A","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-11-01T00:14:29+00:00","modified":"2025-11-01T01:10:20+00:00","when":"2025-11-01T00:14:29+00:00","text":"**Summary**\nSome Google SecOps customers are experiencing delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.\n**Description**\nApplied Threat Intelligence - Curated Prioritization rule sets were inadvertently disabled due to defective code. The defective code has been remediated.\nWe are working to restore the prior ‘enabled status’ and ‘alerting status’ of these rules and anticipate that restoration to be completed sometime Friday, 2025-10-31.\nIn the meantime as a work around, customers can re-enable the rules manually to restore the operation of Applied Threat Intelligence rules.\nWe will provide more information by Friday, 2025-10-31 18:00 PDT with current details.\n**Customer Symptoms**\n* Affected customers will see that ATI rule packs are set to disabled.\n* Detections from these rules will be delayed (only visible once the issue is resolved).\n**Workaround**\nCustomers may view and update configurations for the ATI packs in their SecOps tenant.\n1. In your tenant, go to **Detections \u003e Curated Detections \u003e Rule Sets**\n2. Find the **Applied Threat Intelligence - Curated Prioritization Pack**\n3. Recommended configuration: 1. **Active Breach**, **High Priority **\u0026** Inbound Rules (5 rules):** 1. Precise: On, Alerting \u003e On 2. Broad: On, Alerting \u003e Off 2. **Medium Priority (2 Rules):** 3. Precise: Status \u003e On, Alerting \u003e Off 4. Broad: Status \u003e On, Alerting \u003e Off\nReference public documentation:\n[https://cloud.google.com/chronicle/docs/detection/ati-prioritization](https://cloud.google.com/chronicle/docs/detection/ati-prioritization)\n[https://docs.cloud.google.com/chronicle/docs/detection/curated-detections#enable-configure](https://docs.cloud.google.com/chronicle/docs/detection/curated-detections#enable-configure)\n[https://docs.cloud.google.com/chronicle/docs/detection/ati-curated-detections](https://docs.cloud.google.com/chronicle/docs/detection/ati-curated-detections)","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-10-31T04:05:11+00:00","modified":"2025-11-01T00:14:29+00:00","when":"2025-10-31T04:05:11+00:00","text":"**Summary**\nSome Google SecOps customers are experiencing delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.\n**Description**\nApplied Threat Intelligence - Curated Prioritization rule sets were inadvertently disabled due to defective code. The defective code has been remediated.\nWe are working to restore the prior ‘enabled status’ and ‘alerting status’ of these rules and anticipate that restoration to be completed sometime Friday, 2025-10-31.\nIn the meantime as a work around, customers can re-enable the rules manually to restore the operation of Applied Threat Intelligence rules.\nWe will provide more information by Friday, 2025-10-31 17:00 PDT with current details.\n**Customer Symptoms**\n* Affected customers will see that ATI rule packs are set to disabled.\n* Detections from these rules will be delayed (only visible once the issue is resolved).\n**Workaround**\nCustomers may view and update configurations for the ATI packs in their SecOps tenant.\n1. In your tenant, go to **Detections \u003e Curated Detections \u003e Rule Sets**\n2. Find the **Applied Threat Intelligence - Curated Prioritization Pack**\n3. Recommended configuration: 1. **Active Breach**, **High Priority **\u0026** Inbound Rules (5 rules):** 1. Precise: On, Alerting \u003e On 2. Broad: On, Alerting \u003e Off 2. **Medium Priority (2 Rules):** 3. Precise: Status \u003e On, Alerting \u003e Off 4. Broad: Status \u003e On, Alerting \u003e Off\nReference public documentation:\n[https://cloud.google.com/chronicle/docs/detection/ati-prioritization](https://cloud.google.com/chronicle/docs/detection/ati-prioritization)\n[https://docs.cloud.google.com/chronicle/docs/detection/curated-detections#enable-configure](https://docs.cloud.google.com/chronicle/docs/detection/curated-detections#enable-configure)\n[https://docs.cloud.google.com/chronicle/docs/detection/ati-curated-detections](https://docs.cloud.google.com/chronicle/docs/detection/ati-curated-detections)","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-10-31T01:16:11+00:00","modified":"2025-10-31T04:05:11+00:00","when":"2025-10-31T01:16:11+00:00","text":"**Summary**\nSome Google SecOps customers are experiencing delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.\n**Description**\nApplied Threat Intelligence - Curated Prioritization rule sets were inadvertently disabled due to defective code.\nMitigation work is currently underway by our engineering team to restore the code and is expected to be complete by Thursday, 2025-10-30 21:00 PDT.\nWe will provide more information by Thursday, 2025-10-30 21:30 PDT with current details.\n**Diagnosis / Customer Symptoms**\n* Affected customers will see that ATI rule packs are forcibly set to disabled.\n* Detections from these rules will be delayed (only visible once the issue is resolved).\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-10-30T23:51:40+00:00","modified":"2025-10-31T01:16:11+00:00","when":"2025-10-30T23:51:40+00:00","text":"**Summary**\nSome Google SecOps customers are experiencing delay in detections for ATI content.\n**Description**\nWe are experiencing an issue with Google SecOps beginning at Monday, 2025-10-27 10:00 PDT\nOur engineering team continues to investigate the issue.\nWe will provide more information by Thursday, 2025-10-30 18:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms**\n* Customers will see ATI rule packs are set to disabled.\n* Detections from these rules will be delayed (only visible once they are created)\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2025-11-08T01:06:24+00:00","modified":"2025-11-08T01:07:06+00:00","when":"2025-11-08T01:06:24+00:00","text":"**Summary**\nSome Google SecOps customers may have experienced delay in detections for Applied Threat Intelligence - Curated Prioritization rule sets.\n**Description**\nApplied Threat Intelligence - Curated Prioritization rule sets were inadvertently disabled due to defective code. The defective code has been remediated.\nWe restored the prior ‘enabled status’ and ‘alerting status’ of these rules. Reprocessing of these rules has now completed successfully.\nWe thank you for your patience while we worked on resolving the issue.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/7WCNAQPiBAxm2cCq3rBX","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"8aE3AWcD4kLNFPYq8EQT","number":"2910627667866124219","begin":"2025-10-29T19:31:00+00:00","created":"2025-10-31T22:56:57+00:00","end":"2025-10-30T02:47:00+00:00","modified":"2025-11-01T02:51:34+00:00","external_desc":"Google SecOps service degradation in asia-south1 and asia-southeast2","updates":[{"created":"2025-11-01T02:51:03+00:00","modified":"2025-11-01T02:51:34+00:00","when":"2025-11-01T02:51:03+00:00","text":"**Summary**\nGoogle SecOps service degradation in asia-south1 and asia-southeast2.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2025-10-31 19:47 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis / Customer Symptoms**\nCustomers might have experienced delays in data ingestion and observed a potential drop in ingestion volume.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-10-31T22:56:57+00:00","modified":"2025-11-01T02:51:03+00:00","when":"2025-10-31T22:56:57+00:00","text":"**Summary**\nGoogle SecOps service degradation in asia-south1 and asia-southeast2.\n**Description**\nWe are experiencing an issue with Google SecOps beginning at Wesnesday, 2025-10-29 12:31 PDT\nOur engineering team continues to investigate the issue.\nWe will provide more information by Friday, 2025-10-31 20:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms**\nObserve a potential drop in ingestion volume.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"}]}],"most_recent_update":{"created":"2025-11-01T02:51:03+00:00","modified":"2025-11-01T02:51:34+00:00","when":"2025-11-01T02:51:03+00:00","text":"**Summary**\nGoogle SecOps service degradation in asia-south1 and asia-southeast2.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Friday, 2025-10-31 19:47 PDT.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis / Customer Symptoms**\nCustomers might have experienced delays in data ingestion and observed a potential drop in ingestion volume.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/8aE3AWcD4kLNFPYq8EQT","currently_affected_locations":[],"previously_affected_locations":[{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"}]},{"id":"yBEtUV3QGJkmVLuWp5qe","number":"13626781724391676217","begin":"2025-10-29T16:00:00+00:00","created":"2025-10-29T20:20:07+00:00","end":"2025-10-29T23:08:00+00:00","modified":"2025-10-29T23:59:24+00:00","external_desc":"[Resolved] Google SecOps products affected by the recent third-party cloud provider data feed outage have recovered.","updates":[{"created":"2025-10-29T23:58:17+00:00","modified":"2025-10-29T23:59:24+00:00","when":"2025-10-29T23:58:17+00:00","text":"**Summary:**\nWe experienced an issue with data ingestion impacting multiple Google SecOps services due to a third-party cloud provider outage beginning at approximately 09:00 PDT on Wednesday 2025-10-29.\nAfter extensive monitoring and validations, we have confirmed full recovery of the third-party data feeds on Google SecOps services as of 16:08 PDT on Wednesday 2025-10-29.\n**Symptoms:**\nCustomers may have experienced data feed failures and delayed detections associated with the data from the third party cloud provider.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-10-29T21:45:48+00:00","modified":"2025-10-29T23:58:17+00:00","when":"2025-10-29T21:45:48+00:00","text":"**Summary:**\nWe experienced an issue with data ingestion impacting multiple Google SecOps services due to a third-party cloud provider outage beginning at approximately 09:00 PDT on Wednesday 2025-10-29.\nThe provider is recovering well and anticipates full mitigation by 16:20 PDT on Wednesday 2025-10-29. We are observing a recovery of the third-party data feeds on Google SecOps services at this time. However, customers may observe delayed detections related to the late ingestion of data until we achieve full recovery.\nWe will provide an update by Wednesday, 2025-10-29 17:00 PDT with current details.\n**Symptoms:**\nCustomers may have experienced data feed failures and delayed detections associated with the third party cloud provider.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[]},{"created":"2025-10-29T20:20:07+00:00","modified":"2025-10-29T21:45:48+00:00","when":"2025-10-29T20:20:07+00:00","text":"**Summary:**\nWe are experiencing an issue impacting multiple Google SecOps services due to a third-party cloud outage beginning at approximately 09:00 PDT on Wednesday 2025-10-29.\nThe third party anticipates full mitigation by 16:20 PDT on Wednesday 2025-10-29. We will be able to ascertain Google SecOps mitigation time once we have confirmed their mitigation.\nWe will provide an update by Wednesday, 2025-10-29 14:30 PDT with current details.\n**Symptoms:**\nCustomers are experiencing data feed failures associated with the third party cloud provider.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[]}],"most_recent_update":{"created":"2025-10-29T23:58:17+00:00","modified":"2025-10-29T23:59:24+00:00","when":"2025-10-29T23:58:17+00:00","text":"**Summary:**\nWe experienced an issue with data ingestion impacting multiple Google SecOps services due to a third-party cloud provider outage beginning at approximately 09:00 PDT on Wednesday 2025-10-29.\nAfter extensive monitoring and validations, we have confirmed full recovery of the third-party data feeds on Google SecOps services as of 16:08 PDT on Wednesday 2025-10-29.\n**Symptoms:**\nCustomers may have experienced data feed failures and delayed detections associated with the data from the third party cloud provider.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/yBEtUV3QGJkmVLuWp5qe","currently_affected_locations":[],"previously_affected_locations":[]},{"id":"atzycs5kTdMv3mmiQWci","number":"13447084204707249093","begin":"2025-10-09T14:59:00+00:00","created":"2025-10-09T15:34:57+00:00","end":"2025-10-09T19:30:00+00:00","modified":"2025-10-09T19:47:21+00:00","external_desc":"The issue with SecOps and Cloud Monitoring dashboard has been mitigated","updates":[{"created":"2025-10-09T19:43:00+00:00","modified":"2025-10-09T19:47:21+00:00","when":"2025-10-09T19:43:00+00:00","text":"**Description**\nThe ingestion metrics in SecOps and Cloud Monitoring dashboards are now updating as expected. Actual data ingestion to SecOps was not impacted.\nWe appreciate your patience and support while we investigated and mitigated this issue. We apologize for any inconvenience this may have caused.\n**Customer Symptoms**\nSecOps customers globally may observe drop in ingestion metrics in SecOps and Cloud Monitoring dashboard.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-10-09T15:34:57+00:00","modified":"2025-10-09T19:43:00+00:00","when":"2025-10-09T15:34:57+00:00","text":"**Summary**\nWe are experiencing an issue with SecOps and the Cloud Monitoring dashboard\n**Description**\nGoogle SecOps customers globally may observe drop in ingestion metrics in SecOps and Cloud Monitoring dashboard. Actual data ingestion to SecOps is not impacted.\nWe appreciate your patience while we continue to investigate this issue.\nWe will provide an update by Thursday, 2025-10-09 11:30 PDT with current details.\n**Customer Symptoms**\nSecOps customers globally may observe drop in ingestion metrics in SecOps and Cloud Monitoring dashboard.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2025-10-09T19:43:00+00:00","modified":"2025-10-09T19:47:21+00:00","when":"2025-10-09T19:43:00+00:00","text":"**Description**\nThe ingestion metrics in SecOps and Cloud Monitoring dashboards are now updating as expected. Actual data ingestion to SecOps was not impacted.\nWe appreciate your patience and support while we investigated and mitigated this issue. We apologize for any inconvenience this may have caused.\n**Customer Symptoms**\nSecOps customers globally may observe drop in ingestion metrics in SecOps and Cloud Monitoring dashboard.\n**Workaround**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/atzycs5kTdMv3mmiQWci","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"J1eKogZgryLaWGatjjB2","number":"4380913690548430844","begin":"2025-10-07T05:38:00+00:00","created":"2025-10-07T07:12:02+00:00","end":"2025-10-07T08:20:00+00:00","modified":"2025-10-07T08:49:40+00:00","external_desc":"Google SecOps customers might have experienced delayed ingestion for cloud based data sources and third party API fetches globally.","updates":[{"created":"2025-10-07T08:49:40+00:00","modified":"2025-10-07T08:49:41+00:00","when":"2025-10-07T08:49:40+00:00","text":"**Summary**\nGoogle SecOps customers might have experienced delayed ingestion for cloud based data sources and third party API fetches globally.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2025-10-07 01:20 PDT.\nFrom preliminary analysis, the issue was triggered by a problematic change in the data transport layer. This affected the Cloud to Cloud Transfer operations.\nOur engineers mitigated the issue by identifying and reverting the affected configuration.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nThe impacted Google SecOps customers might have experienced delayed ingestion for cloud based data sources and third party API fetches globally.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-10-07T07:37:04+00:00","modified":"2025-10-07T08:49:40+00:00","when":"2025-10-07T07:37:04+00:00","text":"**Summary**\nGoogle SecOps customers may experience delayed ingestion for cloud based data sources and third party API fetches globally\n**Description**\nWe are experiencing an issue with Google SecOps beginning at Monday, 2025-10-06 22:38 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2025-10-07 02:30 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nThe impacted Google SecOps customers may experience delayed ingestion for cloud based data sources and third party API fetches globally.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-10-07T07:12:02+00:00","modified":"2025-10-07T07:37:04+00:00","when":"2025-10-07T07:12:02+00:00","text":"**Summary**\nGoogle SecOps customers may experience delayed ingestion for cloud based data sources and third party API fetches globally\n**Description**\nWe are experiencing an issue with Google SecOps beginning at Monday, 2025-10-06 22:38 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Tuesday, 2025-10-07 01:00 PDT with current details.\nWe apologize to all who are affected by the disruption.\n**Customer Symptoms**\nThe impacted Google SecOps customers may experience delayed ingestion for cloud based data sources and third party API fetches globally.\n**Workaround**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2025-10-07T08:49:40+00:00","modified":"2025-10-07T08:49:41+00:00","when":"2025-10-07T08:49:40+00:00","text":"**Summary**\nGoogle SecOps customers might have experienced delayed ingestion for cloud based data sources and third party API fetches globally.\n**Description**\nThe issue with Google SecOps has been resolved for all affected users as of Tuesday, 2025-10-07 01:20 PDT.\nFrom preliminary analysis, the issue was triggered by a problematic change in the data transport layer. This affected the Cloud to Cloud Transfer operations.\nOur engineers mitigated the issue by identifying and reverting the affected configuration.\nWe thank you for your patience while we worked on resolving the issue.\n**Customer Symptoms**\nThe impacted Google SecOps customers might have experienced delayed ingestion for cloud based data sources and third party API fetches globally.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/J1eKogZgryLaWGatjjB2","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"KZHdkE2zxGU7PRzvczSU","number":"10950664500114280211","begin":"2025-09-30T13:18:00+00:00","created":"2025-10-01T17:22:24+00:00","end":"2025-10-01T14:40:00+00:00","modified":"2025-10-01T17:50:32+00:00","external_desc":"Google SecOps customers experienced Unified Data Model (UDM) search failures.","updates":[{"created":"2025-10-01T17:50:32+00:00","modified":"2025-10-01T17:50:32+00:00","when":"2025-10-01T17:50:32+00:00","text":"**Description:**\nBetween 06:18 PDT 30 September 2025 and 07:40 PDT 1 October 2025, Google SecOps experienced issues with Unified Data Model (UDM) searches for some customers.\nFrom preliminary analysis, the issue was caused by a recent binary rollout. Our engineers have mitigated the issue by rolling back the binary.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nGoogle SecOps customers who were not onboarded to the Chronicle API experienced Unified Data Model (UDM) search failures. This manifested as errors in the UI when trying to perform a search.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-10-01T17:22:24+00:00","modified":"2025-10-01T17:50:32+00:00","when":"2025-10-01T17:22:24+00:00","text":"**Description:**\nWe experienced an issue with Google SecOps beginning at Wednesday, 2025-10-01 07:47 PDT.\nThe issue is now resolved.\nWe will provide an update by Wednesday, 2025-10-01 10:45 PDT with more details of customer experience during the issue.\nWe apologize to all who are affected by the disruption.\n**Symptoms:**\nGoogle SecOps customers experienced Unified Data Model (UDM) search failures.\n**Workaround:**\nNone at this time.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"}]}],"most_recent_update":{"created":"2025-10-01T17:50:32+00:00","modified":"2025-10-01T17:50:32+00:00","when":"2025-10-01T17:50:32+00:00","text":"**Description:**\nBetween 06:18 PDT 30 September 2025 and 07:40 PDT 1 October 2025, Google SecOps experienced issues with Unified Data Model (UDM) searches for some customers.\nFrom preliminary analysis, the issue was caused by a recent binary rollout. Our engineers have mitigated the issue by rolling back the binary.\nWe thank you for your patience while we worked on resolving the issue.\n**Symptoms:**\nGoogle SecOps customers who were not onboarded to the Chronicle API experienced Unified Data Model (UDM) search failures. This manifested as errors in the UI when trying to perform a search.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_DISRUPTION","severity":"medium","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/KZHdkE2zxGU7PRzvczSU","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"}]},{"id":"T5oHvSQGpfW2dkmFN7UU","number":"17260447698575361060","begin":"2025-09-29T02:46:00+00:00","created":"2025-10-05T17:11:30+00:00","end":"2025-10-05T21:42:00+00:00","modified":"2025-10-06T18:51:18+00:00","external_desc":"Google SecOps customers experiencing issues where Palo Alto Cortex XDR Alerts logs are not being ingested","updates":[{"created":"2025-10-06T18:51:18+00:00","modified":"2025-10-06T18:51:19+00:00","when":"2025-10-06T18:51:18+00:00","text":"**Summary:**\nResolved: An issue with Google SecOps and Palo Alto Cortex XDR Alerts log ingestion in multiple regions.\n**Description:**\nThe issue affecting Google SecOps customers has been resolved for all affected users as of Sunday, 2025-10-05 14:42 US/Pacific. We apologize for the inconvenience this incident caused.\nFrom preliminary analysis, the issue was triggered by a recent software update intended to improve the processing of Palo Alto Cortex XDR alerts.\nThe problematic update was identified, and the issue was mitigated by rolling back the change to restore normal service. All logs that were not ingested during this period are being backfilled.\nWe anticipate the backfill to complete by the end of day 13 October 2025 or sooner. If you have any questions regarding the data backfill, please open a support case with us and we will assist you accordingly.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-10-05T21:21:21+00:00","modified":"2025-10-06T18:51:18+00:00","when":"2025-10-05T21:21:21+00:00","text":"**Summary:**\nGoogle SecOps customers experiencing issue where Palo Alto Cortex XDR Alerts logs are not being ingested\n**Description:**\nOur engineering team has mitigated the issue by rolling out the fix to production and has initiated a backfill of all logs that were not ingested during the period of impact.\nWe do not have an ETA for completion of the backfill at this time.\nWe will provide another update by Friday, 2025-10-10 17:00 US/Pacific.\n**Symptoms:**\nImpacted customers will see a gap in Palo Alto Cortex XDR Alerts data until a backfill is performed. Customers may not see data in Unified Data Model (UDM) Search, and may have delayed rule detections.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-10-05T18:22:27+00:00","modified":"2025-10-05T21:21:21+00:00","when":"2025-10-05T18:22:27+00:00","text":"Mitigation work is currently underway by our engineering team.\nOur engineering team has identified that the issue was caused by a recent change. A fix has been tested and is currently being rolled out to production.\nThe rollout is progressing, and the mitigation is expected to be completed by Sunday, 2025-10-05 14:00 US/Pacific.\nWe will provide another update by Sunday, 2025-10-05 14:30 US/Pacific.\n**Diagnosis / Customer Symptoms:**\n- Impacted customers will see a gap in Palo Alto Cortex XDR Alerts data until a backfill is performed. Customers may not see data in Unified Data Model (UDM) Search, and may have delayed rule detections.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"created":"2025-10-05T17:11:30+00:00","modified":"2025-10-05T18:22:27+00:00","when":"2025-10-05T17:11:30+00:00","text":"We've received a report of an issue with Google SecOps as of Sunday, 2025-10-05 07:57 US/Pacific.\nThe Palo Alto Cortex XDR Alerts log type has not been ingested correctly in some regions beginning on 2025-09-28 19:46 US/Pacific. We have identified the problem and are verifying the solution. We expect the situation to be fully mitigated by 2025-10-05 12:00 US/Pacific.\nWe will provide more information by Sunday, 2025-10-05 11:30 US/Pacific.\n**Diagnosis / Customer Symptoms:**\n- Impacted customers will see a gap in Palo Alto Cortex XDR Alerts data until a backfill is performed. Customers may not see data in Unified Data Model (UDM) Search, and may have delayed rule detections. .","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]}],"most_recent_update":{"created":"2025-10-06T18:51:18+00:00","modified":"2025-10-06T18:51:19+00:00","when":"2025-10-06T18:51:18+00:00","text":"**Summary:**\nResolved: An issue with Google SecOps and Palo Alto Cortex XDR Alerts log ingestion in multiple regions.\n**Description:**\nThe issue affecting Google SecOps customers has been resolved for all affected users as of Sunday, 2025-10-05 14:42 US/Pacific. We apologize for the inconvenience this incident caused.\nFrom preliminary analysis, the issue was triggered by a recent software update intended to improve the processing of Palo Alto Cortex XDR alerts.\nThe problematic update was identified, and the issue was mitigated by rolling back the change to restore normal service. All logs that were not ingested during this period are being backfilled.\nWe anticipate the backfill to complete by the end of day 13 October 2025 or sooner. If you have any questions regarding the data backfill, please open a support case with us and we will assist you accordingly.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/T5oHvSQGpfW2dkmFN7UU","currently_affected_locations":[],"previously_affected_locations":[{"title":"Johannesburg (africa-south1)","id":"africa-south1"},{"title":"Tokyo (asia-northeast1)","id":"asia-northeast1"},{"title":"Mumbai (asia-south1)","id":"asia-south1"},{"title":"Singapore (asia-southeast1)","id":"asia-southeast1"},{"title":"Jakarta (asia-southeast2)","id":"asia-southeast2"},{"title":"Sydney (australia-southeast1)","id":"australia-southeast1"},{"title":"Multi-region: europe","id":"europe"},{"title":"Turin (europe-west12)","id":"europe-west12"},{"title":"London (europe-west2)","id":"europe-west2"},{"title":"Frankfurt (europe-west3)","id":"europe-west3"},{"title":"Zurich (europe-west6)","id":"europe-west6"},{"title":"Paris (europe-west9)","id":"europe-west9"},{"title":"Doha (me-central1)","id":"me-central1"},{"title":"Dammam (me-central2)","id":"me-central2"},{"title":"Tel Aviv (me-west1)","id":"me-west1"},{"title":"Toronto (northamerica-northeast2)","id":"northamerica-northeast2"},{"title":"São Paulo (southamerica-east1)","id":"southamerica-east1"},{"title":"Multi-region: us","id":"us"}]},{"id":"V9hHLm5GWywgjQFk33UG","number":"9858427179076291028","begin":"2025-09-17T01:00:00+00:00","created":"2025-09-17T16:47:55+00:00","end":"2025-09-23T23:00:00+00:00","modified":"2025-09-25T18:28:22+00:00","external_desc":"A small number of Mandiant Digital Threat Monitoring customers were unable to access the monitors and alerts.","updates":[{"created":"2025-09-25T18:28:07+00:00","modified":"2025-09-25T18:28:22+00:00","when":"2025-09-25T18:28:07+00:00","text":"The issue with Alert and Monitor data has been resolved as of September 23rd at 16:00 PDT. The engineering team has confirmed that no data has been lost and the system is operating normally.\nWe are aware that some customers are experiencing some duplicate Alerts, which may impact Alert analytics. Please reach out to your customer support team if you are experiencing this issue or have any questions.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-09-24T17:01:01+00:00","modified":"2025-09-25T18:28:07+00:00","when":"2025-09-24T17:01:01+00:00","text":"Alert regeneration is now complete. We are still investigating cases where duplicate Alerts were generated prior to September 23rd at 16:00 PDT.\nWe will provide an update by Thursday, 2025-09-25 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-23T15:37:19+00:00","modified":"2025-09-24T17:01:01+00:00","when":"2025-09-23T15:37:19+00:00","text":"We are continuing to reprocess monitor data from the impacted period. Impacted customers may continue to receive Alerts at an increased rate and could receive duplicate Alerts.\nWe will provide an update on the status of the data reprocessing by Wednesday, 2025-09-24 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-22T18:44:23+00:00","modified":"2025-09-23T15:37:19+00:00","when":"2025-09-22T18:44:23+00:00","text":"We are still reprocessing monitor data from the impacted period. Impacted customers may continue to receive Alerts at an increased rate and could receive duplicate Alerts.\nWe will provide an update on the status of the data reprocessing by Tuesday, 2025-09-23 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-21T17:00:32+00:00","modified":"2025-09-22T18:44:23+00:00","when":"2025-09-21T17:00:32+00:00","text":"Processing of the restored Alerts is still in progress. Impacted customers may continue to receive Alerts at an increased rate and could receive duplicate Alerts.\nWe will provide an update on the status of the data reprocessing by Monday, 2025-09-22 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-20T16:34:43+00:00","modified":"2025-09-21T17:00:32+00:00","when":"2025-09-20T16:34:43+00:00","text":"Impacted customers will soon start seeing restored Alert data from the affected period as new Alerts in the platform, and may experience a temporary increased Alert rate. Some customers may see some duplicate Alerts.\nUntil the full Monitor data is reprocessed, some of the affected customers may still see gaps in Alerts.\nWe will provide an update on the status of the data reprocessing by Sunday, 2025-09-21 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-19T17:44:07+00:00","modified":"2025-09-20T16:34:43+00:00","when":"2025-09-19T17:44:07+00:00","text":"By 12:00 PDT on 18 September, [Alert History](https://gtidocs.virustotal.com/docs/alerts-guide#view-history-of-an-alert) was restored for Alerts created prior to the incident.\nStarting at 04:50 PDT on 19 September, restored Monitors are now operating normally.\nOur team is continuing the work on reprocessing the Monitor data from the time of the issue so that the corresponding Alerts can be regenerated.\nUntil the full Monitor data is reprocessed, some of the affected customers may still see gaps in Alerts.\nWe will provide an update on the status of the data reprocessing by Saturday, 2025-09-20 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-18T18:06:53+00:00","modified":"2025-09-19T17:44:07+00:00","when":"2025-09-18T18:06:53+00:00","text":"Between 16 September 18:00 PDT and 17 September 09:30 PDT, a subset of Mandiant Digital Threat Monitoring customers experienced access issues with [Monitors](https://gtidocs.virustotal.com/docs/monitors-guide) and [Alerts](https://gtidocs.virustotal.com/docs/alerts-guide).\nBy 09:30 PDT on 17 September, our engineers mitigated the issue thereby restoring access to existing Monitors and new Alerts.\nBy 02:00 PDT on 18 September, we completed the backfill of the alerts from the time of the issue.\nWe are in the process of restoring [Alert History](https://gtidocs.virustotal.com/docs/alerts-guide#view-history-of-an-alert).\nWe are also working on reprocessing the Monitor data from the time of the issue so that the corresponding Alerts can be regenerated.\nUntil the full monitor data is reprocessed, some of the affected customers may still see gaps in Alerts.\nWe will provide an update on the status of the data reprocessing by Friday, 2025-09-19 11:00 PDT or sooner.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-17T22:50:34+00:00","modified":"2025-09-18T18:06:53+00:00","when":"2025-09-17T22:50:34+00:00","text":"Alert backfill is progressing under our close supervision. We will provide an update on the status of the backfill by Thursday, 2025-09-18 10:00 PDT.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-17T19:58:43+00:00","modified":"2025-09-17T22:50:34+00:00","when":"2025-09-17T19:58:43+00:00","text":"Alert backfilling is in progress. The latest alerts have been prioritized for the backfill and customers should start seeing some of the alerts from the time of the issue available. We expect the backfill to complete in the next couple of hours. We will provide another update by Wednesday, 2025-09-17 16:00 PDT with more details.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-09-17T16:47:55+00:00","modified":"2025-09-17T19:58:43+00:00","when":"2025-09-17T16:47:55+00:00","text":"Starting at 18:00 PDT on 16 September 2025, a small number of Mandiant Digital Threat Monitoring customers have experienced issues accessing the monitors and alerts.\nOur engineers identified the cause and applied appropriate mitigations by 09:30 PDT on 17 September 2025. Monitors and alerts after 09:30 PDT should be accessible to the customers. Existing monitors and new alerts should now be available. Historical alerts from the time of the issue are being backfilled by our engineering team.\nWe expect the backfill to take a few hours and we will provide an update by Wednesday, 2025-09-17 13:00 PDT with current details.","status":"SERVICE_DISRUPTION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2025-09-25T18:28:07+00:00","modified":"2025-09-25T18:28:22+00:00","when":"2025-09-25T18:28:07+00:00","text":"The issue with Alert and Monitor data has been resolved as of September 23rd at 16:00 PDT. The engineering team has confirmed that no data has been lost and the system is operating normally.\nWe are aware that some customers are experiencing some duplicate Alerts, which may impact Alert analytics. Please reach out to your customer support team if you are experiencing this issue or have any questions.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"dgtVvWgKSlxi01VBC8mt","service_name":"Mandiant Digital Threat Monitoring","affected_products":[{"title":"Mandiant Digital Threat Monitoring","id":"dgtVvWgKSlxi01VBC8mt"}],"uri":"incidents/V9hHLm5GWywgjQFk33UG","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]},{"id":"4mfvqbRkNHNrMFrJeX5M","number":"11820501377950145868","begin":"2025-08-27T17:10:00+00:00","created":"2025-08-27T22:28:49+00:00","end":"2025-08-27T23:30:00+00:00","modified":"2025-08-27T23:38:29+00:00","external_desc":"SecOps SIEM customers are experiencing a disruption to multi-event rule processing.","updates":[{"created":"2025-08-27T23:34:01+00:00","modified":"2025-08-27T23:38:29+00:00","when":"2025-08-27T23:34:01+00:00","text":"**Summary:**\nSecOps SIEM customers experienced a disruption to multi-event rule processing.\n**Description:**\nThe issue with Google Secops has been resolved for all affected users as of Wednesday, 2025-08-27 16:30 PDT\nThe issue was due to a failed software update. Our engineers have mitigated the issue by fully rolling back to the previous version.\nNo customer action is required.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis / Customer Symptoms:**\nMulti Event Rules were not active.\n**Workaround:**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-08-27T22:28:49+00:00","modified":"2025-08-27T23:34:01+00:00","when":"2025-08-27T22:28:49+00:00","text":"**Summary:**\nSecOps SIEM customers are experiencing a disruption to multi-event rule processing.\n**Description:**\nWe are experiencing an issue with Google Secops beginning at Wednesday, 2025-08-27 10:10 PDT\nOur engineering team continues to investigate the issue.\nWe will provide more information by Wednesday, 2025-08-27 16:30 PDTwith current details.\nWe apologize to all who are affected by the disruption.\n**Diagnosis / Customer Symptoms:**\nMulti Event Rules are not currently running.\n**Workaround:**\nNone at this time.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Multi-region: europe","id":"europe"}]}],"most_recent_update":{"created":"2025-08-27T23:34:01+00:00","modified":"2025-08-27T23:38:29+00:00","when":"2025-08-27T23:34:01+00:00","text":"**Summary:**\nSecOps SIEM customers experienced a disruption to multi-event rule processing.\n**Description:**\nThe issue with Google Secops has been resolved for all affected users as of Wednesday, 2025-08-27 16:30 PDT\nThe issue was due to a failed software update. Our engineers have mitigated the issue by fully rolling back to the previous version.\nNo customer action is required.\nWe thank you for your patience while we worked on resolving the issue.\n**Diagnosis / Customer Symptoms:**\nMulti Event Rules were not active.\n**Workaround:**\nNone at this time.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"FHwvkSZ6RzzDYAvDZXMM","service_name":"Google SecOps","affected_products":[{"title":"Google SecOps","id":"FHwvkSZ6RzzDYAvDZXMM"}],"uri":"incidents/4mfvqbRkNHNrMFrJeX5M","currently_affected_locations":[],"previously_affected_locations":[{"title":"Multi-region: europe","id":"europe"}]},{"id":"7r776Bdk3rqELvuRTN1u","number":"12449139647977293117","begin":"2025-08-25T19:37:00+00:00","created":"2025-08-25T19:50:37+00:00","end":"2025-08-25T21:01:00+00:00","modified":"2025-08-25T21:14:12+00:00","external_desc":"Mandiant Managed Defense customers may have experienced elevated errors","updates":[{"created":"2025-08-25T21:13:26+00:00","modified":"2025-08-25T21:14:12+00:00","when":"2025-08-25T21:13:26+00:00","text":"The issue with Mandiant Managed Defense has been resolved for all affected users as of Monday, 2025-08-25 14:01 PDT.\nWe thank you for your patience while we worked on resolving the issue.\nCustomer Symptoms:\n* Customers may have experienced elevated HTTP 500 errors for events from Chronicle Curated Detection Alerts.\n* Customers may have not been able to view details or report alerts.\n* Customers may have experienced errors accessing events from Chronicle Curated Detections.","status":"AVAILABLE","affected_locations":[]},{"created":"2025-08-25T20:56:35+00:00","modified":"2025-08-25T21:13:26+00:00","when":"2025-08-25T20:56:35+00:00","text":"We are experiencing an issue with Mandiant Managed Defense beginning at Monday, 2025-08-25 12:37 PDT.\nOur engineering team has identified the underlying cause of the issue and is currently working on the mitigation.\nWe will provide an update by Monday, 2025-08-25 15:30 PDT with current details.\nCustomer Symptoms:\n* Customer may experience elevated HTTP 500 errors for events from Chronicle Curated Detection Alerts.\n* Customers may not be able to view details or report alerts.\n* Customer may experience errors accessing events from Chronicle Curated Detections.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-08-25T20:03:02+00:00","modified":"2025-08-25T20:56:35+00:00","when":"2025-08-25T20:03:02+00:00","text":"We are experiencing an issue with Mandiant Managed Defense beginning at Monday, 2025-08-25 12:37 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Monday, 2025-08-25 14:00 PDT with current details.\nCustomer Symptoms:\n* Customer may experience elevated HTTP 500 errors for events from Chronicle Curated Detection Alerts.\n* Customers may not be able to view details or report alerts.\n* Customer may experience errors accessing events from Chronicle Curated Detections.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]},{"created":"2025-08-25T19:50:37+00:00","modified":"2025-08-25T20:03:02+00:00","when":"2025-08-25T19:50:37+00:00","text":"We are experiencing an issue with Mandiant Managed Defense beginning at Monday, 2025-08-25 12:37 PDT.\nOur engineering team continues to investigate the issue.\nWe will provide an update by Monday, 2025-08-25 13:20 PDT with current details.\nWe apologize to all who are affected by the disruption.","status":"SERVICE_INFORMATION","affected_locations":[{"title":"Global","id":"global"}]}],"most_recent_update":{"created":"2025-08-25T21:13:26+00:00","modified":"2025-08-25T21:14:12+00:00","when":"2025-08-25T21:13:26+00:00","text":"The issue with Mandiant Managed Defense has been resolved for all affected users as of Monday, 2025-08-25 14:01 PDT.\nWe thank you for your patience while we worked on resolving the issue.\nCustomer Symptoms:\n* Customers may have experienced elevated HTTP 500 errors for events from Chronicle Curated Detection Alerts.\n* Customers may have not been able to view details or report alerts.\n* Customers may have experienced errors accessing events from Chronicle Curated Detections.","status":"AVAILABLE","affected_locations":[]},"status_impact":"SERVICE_INFORMATION","severity":"low","service_key":"9aKw9s8p43AYeBmo4Gvx","service_name":"Mandiant Managed Defense","affected_products":[{"title":"Mandiant Managed Defense","id":"9aKw9s8p43AYeBmo4Gvx"}],"uri":"incidents/7r776Bdk3rqELvuRTN1u","currently_affected_locations":[],"previously_affected_locations":[{"title":"Global","id":"global"}]}]