Email Security.cloud: Partial Results from Data Feed API

Resolved
Resolved

Service has been restored. Customers who wish to retrieve missing data for the past 7 days can reset their cursors to 7 days in the past.

Monitoring

We have identified the cause of the issue and have implemented a fix. Customers using the Data Feed API will no longer receive partial results.

As a result of the change, the “Data Protection/Image Control data available in Data Feeds API metadata” feature released on March 6, 2025 has been rolled back. Customers will no longer have the ability to retrieve metadata about Data Protection or Image Control services via the /all feed.

Customers using the Spunk or QRadar apps would still have email meta-data for emails that triggered the Data Protection service.

We will now monitor the service for stability and provide updates as soon as new information becomes available.

Identified

Starting March 6, 2025 at approximately 15:00 UTC, customers using the Data Feed API service may notice partial results when querying the Data Feed API service. If an email triggered any Data Protection policy then that email’s meta-data would not be included in the query results. If the email triggered no detection, or the email triggered another service detection (other than Data Protection), then that email’s meta-data would be included in the query results.

Note that this issue only impacted the meta-data in the Data Feed API and did not impact email scanning or delivery.

We have engaged all appropriate resources and are working towards a resolution. Note that there is no impact to protection services, and all other aspects of our services remain functional. We will provide further updates as new information becomes available.

Began at:

Affected components