Skip to content

Incident detail

PAB sending a Non-Delivery Report after an Email is Reported (US Only)

Resolved incidentMinor

Timeline window

to

Get alerted the next time KnowBe4 breaks

Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.

Timeline

Incident updates

Every update on the official status source, oldest to newest, exactly as it appeared there.

  1. Investigating

    We are investigating an issue causing a Non-Delivery Report (NDR) to be returned when a message is reported via the Phish Alert Button and "Send Us a Copy" is enabled in Account Settings

  2. Monitoring

    A fix has been implemented and we are monitoring the results.

  3. Resolved

    This incident has been resolved.

  4. Resolved

    On Tuesday, August 18, 2026, from approximately 14:10 to 14:55 (UTC), customers using the Phish Alert Button (PAB) with the Send Us a Copy feature enabled received non-delivery reports for the Send Us a Copy mailbox.

    This issue was caused by a configuration change to the shared email routing infrastructure. This change renamed a messaging component used by both our staging and production environments. Because a production rule depended on this shared component, the rename caused delivery failures to the Send Us a Copy mailbox and triggered non-delivery reports. To resolve this issue, our team updated the affected configuration to reference the correct component, and the Send Us a Copy feature returned to normal performance by 14:55 (UTC).

    To prevent this type of issue in the future, we are separating email routing configurations for our staging and production environments. We are also reconciling legacy configurations into our current infrastructure management standards.

    No data loss occurred as a result of this issue.

Keep exploring

More from KnowBe4

Neighboring incidents on KnowBe4's timeline and the rest of their record on OutageDeck.