According to Decrypt, GitBook experienced a security incident in which attackers gained access to infrastructure credentials through an AI-assisted breach. The company responded by shutting down affected services and initiating emergency token resets for users.
GitBook confirmed that the breach involved unauthorized access to credential material used in its platform’s operations. The incident prompted immediate action, including a temporary suspension of certain functionalities to contain the issue. Users were instructed to rotate their authentication keys as part of recovery measures.
No further details were provided regarding the method of initial compromise, scope beyond infrastructure credentials, number of users affected, or ongoing investigation status. GitBook did not specify whether the AI agent system was directly involved in credential exposure or if external tools played a role. The company emphasized user key rotation as a required step for account security.
The announcement followed reports indicating that the breach surfaced during routine monitoring. GitBook’s response focused on securing credentials and guiding users through key replacement procedures. No public advisory was issued outside this communication.
