Skip to content
Moojaz — موجز
Search
Menu
HomeRegionsMaghrebAfricaMiddle EastEuropeAsiaAmericasWorldSectionsPoliticsEconomySecurityHealthScienceTechnologyAIEnvironmentCultureSportsSearch
File

Northflank: security of secrets and AI keys

This dossier follows the Northflank incident, exposure of credentials entrusted to the platform and remediation.

Last updated : 1 key moments
Padlock over a blue circuit pattern.
Cybersecurity illustration created in 2018; it does not depict the incident. — jaydeep_ / Pixabay / Wikimedia Commons — CC0 1.0 https://creativecommons.org/publicdomain/zero/1.0/ — illustration de 2018.

Where things stand

As of 31 October 2026, Northflank calls for secret revocation and expands rotation tools; the scope remains undetermined.

Reported information

Northflank expands secret rotation after unauthorized AI key use

Northflank expanded database-credential rotation tools on 31 October 2026 following the incident disclosed the previous day. The platform says several customers have reported unauthorized use of their AI API keys.

Padlock over a blue circuit pattern.
Cybersecurity illustration created in 2018; it does not depict the incident. — jaydeep_ / Pixabay / Wikimedia Commons — CC0 1.0 https://creativecommons.org/publicdomain/zero/1.0/ — illustration de 2018.

Audit logs are now available to every account. Customers are still told to assume all environment variables are compromised: revoke credentials with their issuing provider, generate replacements and update applications.

Northflank also asks customers to check AI service usage and billing records. The exact cause and affected customer count have not been established. The platform-wide warning does not establish that every customer suffered theft.

Sources 3