GoKawiilGitBook suffers credential-theft attack, takes services offline
GitBook confirmed that on November 2 at 19:00 CET, attackers using AI agents gained unauthorized access to some infrastructure credentials. The company took its app and authenticated docs sites offline while keeping public content cached and live, then restored services after replacing credentials and revoking API tokens. GitBook says the attackers may have accessed Git Sync secrets, API tokens, third-party integration tokens, and visitor questions to GitBook Assistant, though no content appears to have been modified.