Skip to content

Northflank expands secret rotation after unauthorized AI key use

Northflank expanded database-credential rotation tools on 31 October 2026 following the incident disclosed the previous day. The platform says several customers have reported unauthorized use of their AI API keys.

Audit logs are now available to every account. Customers are still told to assume all environment variables are compromised: revoke credentials with their issuing provider, generate replacements and update applications.

Northflank also asks customers to check AI service usage and billing records. The exact cause and affected customer count have not been established. The platform-wide warning does not establish that every customer suffered theft.

Sources 3