# Northflank warns customers to rotate secrets after AI API key abuse

_Published Saturday, October 31, 2026 at 3:06 PM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![Northflank warns customers to rotate secrets after AI API key abuse — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/31/northflank-header.jpg)

Northflank has warned customers to rotate all credentials and secrets stored on its cloud application hosting platform after a breach led to reported unauthorized use of customers' AI API keys. The company disclosed the incident on October 30 and told customers to assume their environment variables had been decrypted and their secrets stolen.

Northflank deployed network policy patches, enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis, and extended audit logs to all customers, including free accounts. Customers were advised to check AI usage and billing logs for unexpected activity. The company has not disclosed the attackers' entry point, the number of affected customers or whether other credentials were stolen or abused.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/)

---
Canonical: https://techandbusiness.org/newswire/0lgv5fFafm3aog93GwCkd0
Published: 2026-10-31T19:06:04.682Z
Story chronology: 2026-10-30T11:43:00.000Z
Retrieved: 2026-10-31T21:55:11.603Z
Publisher: Tech & Business (techandbusiness.org)