Major incident

Sumsub: DDos attack

Affected: API, API, API

Current status of Sumsub: Operational — live Sumsub status

Timeline

1. May 16, 2026, 07:30 UTC
   identified
   Our service is currently being targeted by a DDoS attack. Our Team is implementing counter measures at the moment. We will keep you posted.
2. May 16, 2026, 08:17 UTC
   monitoring
   We have succesfully identified and blocked the source of attack. Currently the Team is reviewing the attack aftermath. All systems are up and operational. We will keep monitoring the situation for some additional time to ensure the incident is fully addressed. Thank you!
3. May 16, 2026, 13:37 UTC
   resolved
   Our Team has succesfully concluded the incident resolved. Everything is now operational. The attack took place between 07:15 UTC and 8:00 UTC. During the attack, we received a spike of 20–30x increase in total requests. The attack is still ongoing; However, our Team has mitigated it for now and are working with Cloudflare on a more reliable permanent solution. If you have any questions, please, don't hesitate to contact Support.

Updates as published by Sumsub (original).