Northflank breach exposes customer AI API keys and environment secrets
Cloud hosting platform Northflank disclosed on October 30 that a security breach allowed attackers to decrypt customers' stored environment variables, exposing database passwords, authentication tokens and API keys. The company confirmed multiple customers reported unauthorized use of their AI API keys and urged all users to immediately rotate every secret stored on the platform. Northflank said it was alerted to the issue by cloud security firm Wiz and deployed network policy patches within about 90 minutes.