According to The Defiant, GitBook has revoked all personal API tokens issued to users. The company disclosed the action in response to a security incident it describes as an attack that utilized AI agents. It says the breach may have exposed integration credentials and questions submitted by visitors to its documentation.
GitBook did not specify when the incident occurred or provide technical details about the AI agents involved. It stated that all personal API tokens are now invalid and advised users to create new tokens if they need to access integrations. The company urged affected users to review their account settings and enable any available security options.
The disclosure emphasizes that no customer data beyond integration credentials and documentation-related questions is believed to have been accessed. GitBook did not confirm whether the AI agents were developed internally or sourced externally, nor did it release a timeline for investigating the incident further.
