# Northflank urges all users to rotate secrets during security incident

_Published Friday, October 30, 2026 at 1:18 PM EDT · Security · Latest · Tier 1 — Major_

![Northflank status — Primary](https://northflank.instatus.com/api/og)

Northflank told all users to assume their environment variables had been decrypted and rotate keys immediately during an October 30 security incident. Its status page said multiple users were confirming unauthorized use of their AI keys.

In a 3:12 PM UTC update, Northflank said it had enabled secret rotation for Postgres and MongoDB for all users and recommended disabling public exposure on addons. The warning covered workload secrets, secret groups and global secrets.

The platform listed major outages across networking, certificates, services, addons, jobs, builds, and logs and metrics. Northflank said engineers reviewed a Wiz threat alert at 11:44 UTC, deployed several patches and requested Wiz incident-response support.

## Sources

- [status.northflank.com](https://status.northflank.com)

---
Canonical: https://techandbusiness.org/newswire/PDhEY580UwPMF12qZcQAgE
Published: 2026-10-30T17:18:58.723Z
Story chronology: 2026-10-30T15:12:25.006Z
Retrieved: 2026-10-30T19:39:33.933Z
Publisher: Tech & Business (techandbusiness.org)