Northflank security breach leads to unauthorised use of customers' AI API keys
Cloud platform Northflank suffered a security breach and a major service outage, and some customers reported unauthorised use of AI API keys they had stored. Assuming all environment variables may have been decrypted, the company told customers to rotate secrets and credentials and began an investigation with an external incident response team. On 2 November it said there was no sign that data of running workloads had been accessed, and the initial intrusion route and full extent of harm are under investigation.
Key facts
- Affected organisation
- Northflank
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Unauthorised use of some customers' AI API keys and a major service outage
- Cause / method
- Security breach targeting secrets stored in the platform's control plane
- Location
- United Kingdom
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Northflank announced a security incident and reports of unauthorised use of customers' AI API keys, and told customers to rotate secrets and credentials.
- It was reported that Northflank had begun an investigation with an external incident response team.
- Northflank said there was no sign that data of running workloads had been accessed and that an independent forensic investigation was under way.
13 related reports
- Northflank Suffers Security Breach, Urges Customers to Rotate Keys
- Northflank Breached
- Hosting customers reported AI-key misuse
- Northflank reports security incident, tells users to rotate all secrets
- Northflank Tells Users to Rotate Secrets After Security Incident
- Northflank Issues Urgent Security Warning: All Customers Told to Rotate Secrets After Potential Exposure + Video
- Northflank сообщила об инциденте безопасности: пользователям велено сменить все ключи
- Northflank Tells Users to Rotate All Secrets After Security Incident
- Northflank Incident: Rotate Keys, Check AI Bills
- Northflank security breach leads to abuse of customers' AI API keys
- Northflank urges credential rotation after security incident
- Northflank Security Breach Leads to Unauthorized AI API Key Usage, Customers Urged to Rotate Secrets
- Northflank environment-variable security incident
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.