We also maintain a list of Known Product Issues separate from this site here.
We recently addressed issues affecting Box public APIs, Shared Links and Box Notes. We would like to take the opportunity to further explain these issues and the steps we have taken to keep them from happening in the future.
Between 11:18 AM and 12:15 PM PST on Feb 19th, 2025, some users may have experienced difficulties while working in Box. During this period, there was a noticeable degradation in the following services: Public API, Login, Box Sign, Shared Links, and Notes. Due to a gap in the procedure related to the management of application authentication keys, this led to a deletion of keysets that were mistakenly believed to be no longer necessary. The impact of this was detected through a drop in Box’s User Availability metrics at 11:15am PST and by 11:52am PST. This drop was traced to the operation of the deletion of these keys.
Analysis
The deleted key is important for token-based authentication between the application and the database which stores security rules to validate Box upstream services. The deletion of this key caused the authentication failure of the application with the database and prohibited the application from executing properly. Additionally, after reviewing our protocol around customer awareness of issues, we realize that our timeliness goal for posting to our Status site was not met.
Corrective Actions
Box has initiated the following corrective actions:
We are continuously working to improve Box and want to make sure we are delivering the best product and user experience we can. We hope we have provided some clarity here and we would be happy to answer any questions you may still have regarding this matter.
Sincerely,
The Box Team