GitBook security incident history
Hacking, data breaches and other security incidents involving GitBook, with related coverage.
GitBook SSO breach may have exposed customer tokens and documents
Impact: Possible exposure of customer API and integration tokens, Git Sync secrets, documents, and AI assistant questions; approximately 16 hours of service downtime
GitBook suffered a breach on November 2, 2026, in which an attacker accessed infrastructure credentials. The attacker exploited an SSO login flaw to create an employee session, then used GitHub App and Cloudflare credentials to access production infrastructure. Customer API tokens, integration secrets, documents, and questions entered into the AI assistant may have been exposed, and the company treated all customer data as exposed. GitBook suspended service for approximately 16 hours, rotated credentials, and invalidated customer API tokens.
Related reports: 16 · last report →