According to Bleeping Computer, cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform following a security breach that resulted in unauthorized use of customers’ AI API keys. The company reported that due to the breach, some customer-generated AI API keys were accessed outside of intended usage. Northflank indicated that it has taken steps to address the issue and is guiding affected users on how to manage their credentials.
The announcement emphasizes that all customers should generate new API keys and replace any existing ones stored within the platform. Northflank advises against reusing compromised or potentially exposed keys, particularly those associated with AI services. The recommendation applies broadly to all credentials and secrets managed through the platform’s interface or automation systems.
Northflank did not specify when the breach occurred, nor provide details on how many customers may have been affected. It also did not describe the method of access or internal investigation findings. The company stated it is improving security practices but stopped short of issuing a public technical analysis at this time. Customers are directed to Northflank’s support resources for guidance on rotating keys and securing account settings.
