Northflank security breach leads to abuse of customers' AI API keys

Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.

Northflank is a cloud platform that allows developers to deploy and manage applications, containers, databases, and AI applications without managing the underlying infrastructure.

The company disclosed a security incident on October 30, warning customers to immediately rotate their environment variables and API keys after receiving a threat alert from cloud security company Wiz.

Soon after, Northflank told all customers to assume their environment variables had been decrypted and that the secrets stored within them were stolen.

"Assume all environment variables have been decrypted. Disable/rotate all keys," Northflank warned in an October 30 update.