Uploads of evidence files larger than 50 MB failed with an error for a majority of agencies. Uploads of smaller files were not affected, and all previously uploaded evidence remained fully available throughout — this issue affected new large-file uploads only.
What happened: As part of a planned security improvement, we moved evidence-upload authorization to a new, more tightly scoped signing credential. The new credential's permissions unintentionally omitted one of our two evidence storage locations. Agencies whose evidence is stored in that location received an access error when uploading large files (large files use a different upload path than small ones, which is why only they were affected). Most of the impact window was overnight; failures were concentrated on the morning of July 14 as agencies began uploading.
Resolution: We corrected the credential's permissions at 12:53 PM PT on July 14 and verified the fix end-to-end with a large-file upload at 1:06 PM PT. Uploads are fully restored for all agencies.
Your data was never at risk. No evidence was lost, altered, or exposed — the error prevented new uploads from starting, and the change involved was a security hardening of upload permissions, not a weakening.
Action needed: If you attempted to upload a file larger than 50 MB during the impact window and saw an upload error, please retry the upload. Everything uploaded successfully before or after the window needs no action. If a retried upload does not succeed, contact support and we'll assist directly.
We're sorry for the disruption. We've added safeguards to prevent this class of permission gap from recurring, and we're completing a storage migration that eliminates the underlying dual-location complexity entirely.
Resolved
Uploads of evidence files larger than 50 MB failed with an error for a majority of agencies. Uploads of smaller files were not affected, and all previously uploaded evidence remained fully available throughout — this issue affected new large-file uploads only.
What happened: As part of a planned security improvement, we moved evidence-upload authorization to a new, more tightly scoped signing credential. The new credential's permissions unintentionally omitted one of our two evidence storage locations. Agencies whose evidence is stored in that location received an access error when uploading large files (large files use a different upload path than small ones, which is why only they were affected). Most of the impact window was overnight; failures were concentrated on the morning of July 14 as agencies began uploading.
Resolution: We corrected the credential's permissions at 12:53 PM PT on July 14 and verified the fix end-to-end with a large-file upload at 1:06 PM PT. Uploads are fully restored for all agencies.
Your data was never at risk. No evidence was lost, altered, or exposed — the error prevented new uploads from starting, and the change involved was a security hardening of upload permissions, not a weakening.
Action needed: If you attempted to upload a file larger than 50 MB during the impact window and saw an upload error, please retry the upload. Everything uploaded successfully before or after the window needs no action. If a retried upload does not succeed, contact support and we'll assist directly.
We're sorry for the disruption. We've added safeguards to prevent this class of permission gap from recurring, and we're completing a storage migration that eliminates the underlying dual-location complexity entirely.
