INC-3723 (P1 - High Priority)

Incident Report for Yoti

Postmortem

Sunday 10th May 2026 - Tuesday 12th May

We are pleased to confirm that all Yoti services have returned to normal operation following a period of service instability.

Starting on the evening of May 10th, our network was targeted by a highly orchestrated and large-scale distributed DDoS attack. This was a coordinated attempt to overwhelm our systems with high volumes of traffic, which resulted in intermittent outages and access issues across our platform.

We would like to reassure you that this was a connectivity-based attack. At no point was the integrity of our core systems or your personal data compromised.

To resolve the issue and protect against future attacks, we have:

  • Successfully migrated our network traffic to a global, industry-leading protection service (Cloudflare).
  • Implemented enhanced filtering to block malicious traffic before it reaches our services.
  • Increased our infrastructure capacity to better handle unexpected traffic spikes.

We sincerely apologise for the disruption to your service and thank you for your patience while our teams worked around the clock to resolve this.

Posted May 12, 2026 - 15:55 UTC

Resolved

All Yoti services have been restored to normal operation. The recent disruption caused by a targeted DDoS attack was resolved through the implementation of enhanced network security and traffic filtering.

Our systems are now operating under reinforced protection to ensure continued availability.
Posted May 12, 2026 - 15:54 UTC

Update

We are pleased to report that all services are currently returning to normal operational levels. Our technical teams have successfully identified and implemented a permanent fix; as a result, core functionality has been restored across our entire product suite.

Whilst systems are stable, we are entering a period of extended monitoring. We will be closely tracking all products and user sessions to ensure that performance remains consistent under full load.

We intend to officially mark this incident as Resolved once we are confident in the long-term stability of the environment.

Should you experience any performance issues, please reach out to our Customer Support Team.
We appreciate your patience whilst we worked to restore your service.
Posted May 12, 2026 - 10:10 UTC

Update

Pleased to update that the measures taken have now significantly improved access to Yoti services and we are now actively monitoring the situation.
Posted May 12, 2026 - 07:04 UTC

Update

Pleased to update that the measures taken have now significantly improved access to Yoti services and we are now actively monitoring the situation.
Posted May 12, 2026 - 06:31 UTC

Monitoring

We have fixed the Digital ID,Identity verification,Age verification,Age estimation, eSignatures, Yoti Hub, Yoti Website, Yoti Password Manager, Yoti Web Account, UK Post Office In-branch verification (IBV), Yoti Verified Calls, Credentials services. Our engineers will monitor the situation until we declare the incident resolved.
Posted May 12, 2026 - 05:47 UTC

Update

We have now made significant progress in restoring operational service across the Yoti platform.
We are continuing to work on an additional fix and will update shortly.
Posted May 12, 2026 - 05:00 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 04:30 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 04:00 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 03:30 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 03:00 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 02:30 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 02:00 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 01:30 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 01:00 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 00:30 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information.  While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 12, 2026 - 00:04 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 23:26 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information.  While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 22:54 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 22:24 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 22:08 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information.  While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 21:24 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 20:54 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 20:25 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 19:54 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information.  While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 19:24 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 18:53 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 18:23 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. While this is causing some connection issues, please be mindful that all user data is safe and unaffected.
Posted May 11, 2026 - 17:53 UTC

Update

A targeted and sustained DDoS (Denial of Service) attack continues to affect the Yoti platform. Our security and engineering teams are working alongside our anti DDoS provider to restore services. We are starting to see an improvement in some services and will continue to update this page as soon as we have more information. We would like to assure all our customers that this is a Denial of Service attack and all customer data remains secure.
Posted May 11, 2026 - 17:22 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 16:55 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 16:26 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 15:56 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 15:26 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 14:56 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 14:26 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 13:56 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 13:26 UTC

Update

We are still experiencing a targeted and sustained DDoS (Denial of Service) attack which has impacted availability of parts of the Yoti platform. Our security and engineering teams are continuing to work on restoring all services and will keep you informed of further developments on this page.
Posted May 11, 2026 - 12:56 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page.
Posted May 11, 2026 - 12:26 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page.
Posted May 11, 2026 - 11:56 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page.
Posted May 11, 2026 - 11:26 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page.
Posted May 11, 2026 - 10:56 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page.
Posted May 11, 2026 - 10:10 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page
Posted May 11, 2026 - 09:40 UTC

Update

Last night, Yoti experienced a targeted and sustained DDoS (denial of service) attack which impacted availability across parts of the Yoti platform.

Our security and engineering teams responded immediately and are working to restore all services.

We continue to monitor closely and will keep you informed of any further developments on this page
Posted May 11, 2026 - 09:07 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 08:40 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 08:10 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 07:39 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 07:10 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 06:40 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 06:11 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 05:40 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 05:10 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 04:40 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 04:10 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 03:40 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 03:10 UTC

Update

We are aware of an ongoing network-level incident affecting service availability for some customers. Mitigations have been applied and service has been substantially restored, however residual impact may still be observed in the form of intermittent timeouts or degraded performance.
Posted May 11, 2026 - 02:40 UTC

Update

Service restoration is currently underway for most users. We appreciate your patience as we finalise the fix.
Posted May 11, 2026 - 02:14 UTC

Update

Service restoration is currently underway for most users. We appreciate your patience as we finalise the fix.
Posted May 11, 2026 - 01:19 UTC

Update

Service restoration is currently underway for most users. We appreciate your patience as we finalise the fix.
Posted May 11, 2026 - 00:49 UTC

Identified

Service restoration is currently underway for most users. We appreciate your patience as we finalise the fix.
Posted May 11, 2026 - 00:20 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 11, 2026 - 00:11 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 10, 2026 - 23:41 UTC

Update

We are experiencing issues with all our services.
Posted May 10, 2026 - 23:15 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 10, 2026 - 22:43 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 10, 2026 - 22:14 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 10, 2026 - 21:42 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 10, 2026 - 21:11 UTC

Update

we are still experiencing issues with all Yoti services.
Posted May 10, 2026 - 20:41 UTC

Investigating

We are experiencing issues with all our services.
Posted May 10, 2026 - 20:12 UTC
This incident affected: Global (Digital ID, Identity verification, Identity verification portal, Age verification, Age estimation, eSignatures, Yoti Hub, Yoti Website, Yoti Password Manager, Yoti Web Account, UK Post Office In-branch verification (IBV), Yoti Verified Calls, Credentials) and USA1 (Identity verification, Age verification, Age estimation).