News

Changes to access and security for EDI systems

April 24, 2026

Mark Servilla

Description

In response to a recent denial-of-service attack, EDI now requires users to sign in when accessing data package summaries.

Summary:

The EDI data portal was recently targeted by a denial-of-service attack that disrupted access for about 36 hours. To keep the system stable and available, access controls have been strengthened. You now need to be signed in to view data package summary pages. This allows us to separate real users from automated traffic that can overwhelm our systems. You can sign in directly from the Data Portal using one of our identity providers: GitHub, Google, Microsoft, and ORCID.

These changes are part of a broader update across EDI services, including the Data Portal, ezEML, DeX, IAM, and the API, to improve reliability and protect access to data.

Impact on use:

• Regular browsing now requires sign in for some pages.
• Automated scripts or applications may be slowed or temporarily blocked if they send too many requests (HTTP 429 responses).

These controls are standard for maintaining performance under load. Adjustments to scripts or workflows may be required to stay within limits. If access issues occur, contact the EDI team with details of your use case so access can be aligned with system limits.