GoKawiilApify rotates API tokens and resets 2FA after internal system breach
Apify detected unauthorized access to parts of its internal systems between November 9-10, discovered the next day, and responded by cutting off the attacker, rotating API tokens and Apify Proxy passwords, and resetting all active sessions. The company also revoked OAuth connections to third-party integrations like GitHub and is telling some customers to reset their two-factor authentication because their 2FA codes may have been exposed.