Northflank is investigating a security incident tied to reported misuse of AI keys, while warning that environment variables across workloads, secret groups, and global settings may have been exposed. It has not confirmed the entry point, identified an attacker, or disclosed affected customers.
Timeline of the response
Northflank’s published timeline starts with a Wiz threat alert at 11:43 UTC on October 30, 2026. Engineers reviewed the alert one minute later and applied an initial network policy patch at 12:02 UTC. Additional patches followed at 12:50 and 13:05 UTC, and the team asked the Wiz incident response team for help at 13:00 UTC.
The timeline does not say what the patches changed. A network policy update by itself does not show how attackers entered the platform or reached customer secrets.
Credential exposure and response steps
Northflank told users to treat environment variables as compromised and to restrict public access to add-ons where that setting exists. Those variables can contain API keys, database passwords, and other application credentials.
Customers were told to revoke existing credentials through the issuing providers, create replacements, and update the affected Northflank secrets and workloads. Northflank also asked users to check AI provider usage and billing records for unexpected activity, then report suspicious use to its support team and the relevant provider.
The company said the reported activity may fit a broader wave of attacks aimed at AI credentials. It pointed to similar IP addresses in Wiz’s Black October report, which described incidents across nine AI developer platforms during October. Wiz found a shared focus on stored environment variables, but did not identify a single vulnerability linking the incidents. The financial risk is tied to LLMjacking, where stolen credentials are used to consume paid AI services at the victim’s expense.
What remains open in the case
Northflank has not published a confirmed loss total, and it has not linked the incident to a named resale operation. Its latest guidance still covers secrets across workloads, shared secret groups, and global settings while the investigation remains open.
Secret rotation is now available for PostgreSQL, MongoDB, MySQL, Redis, MinIO, and RabbitMQ add-ons. Northflank also enabled audit logs for all customers, including free users, so more teams can access records that may help the investigation.
Licensed under CC BY-ND 4.0 International