Security AlertHigh
Northflank breach led to stolen AI API keys
Oct 31, 2026 · Summarized by Fundy Tech from BleepingComputer
The 30-second version
Northflank says a security breach led to unauthorised use of customers' AI API keys. The company told users to rotate credentials and secrets right away.
Key points
- Northflank was alerted by cloud security company Wiz.
- Customers were told to assume environment variables were decrypted.
- Multiple customers reported unauthorised AI API key use.
- Audit logs were enabled for all customers, including free accounts.
Why it matters
If you store secrets in cloud platforms, one breach can reach other services fast. Rotate keys, passwords and tokens if you use Northflank or similar tools. Check AI provider billing and usage logs for anything unusual.
Who’s affected: Northflank customers and stored secrets
What to do
- Rotate all secrets and API keys stored in Northflank.
- Review AI usage and billing logs.
- Check connected services for suspicious activity.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.