{"id":"CMP-202610-northflank-paas-ai-app-hosting-platform-breached-attackers-d","kind":"campaign","aliases":[],"related":[],"title":"Northflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used","description":null,"summary":"On 2026-10-30 Northflank confirmed a security incident on its status page after a Wiz threat alert at 11:43 UTC. At 13:58 UTC it told all customers to assume every environment variable has been decrypted and to disable/rotate all keys: secrets on workloads, secret groups and global secrets. Multiple customers confirm their AI API keys have already been used by attackers. Platform components (networking, certificates, services, addons, jobs, builds, logs) were in major outage. Postgres and MongoDB addon secret rotation was enabled; Northflank recommends disabling public exposure on addons. Anyone running workloads, jobs or databases on Northflank is at risk; whether BYOC deployments are affected is unknown. Attack vector, attacker and number of affected customers unknown. Sentry, a customer, reports rotating secrets and finding no impact.","severity":"critical","cvss":null,"epss":null,"exploited":true,"exploited_at":"2026-10-30T21:18:15+00:00","products":[{"name":"Northflank","fixed":[],"affected":"all customers (BYOC status unknown)","ecosystem":"saas"}],"ecosystems":[],"tags":["campaign","early-warning"],"not_affected_if":[],"how_to_check":"- Check whether your team has any project, service, job, secret group or addon on Northflank (northflank.com)\n- Review usage and billing logs of every API key stored there (OpenAI, Anthropic and other AI providers, cloud, database, SaaS tokens) for use from 2026-10-30 onward, or earlier; when access started is unknown\n- Check Postgres/MongoDB addons with public exposure enabled for unknown connections","fix":"- Rotate every secret stored in Northflank now (workload secrets, secret groups, global secrets), starting with AI provider keys and cloud credentials; revoke the old values at the provider, not just in Northflank\n- Rotate Postgres and MongoDB addon credentials (Northflank has enabled rotation) and turn off public exposure on addons\n- Follow status.northflank.com for the root cause and further steps","status":"open","published_at":null,"first_seen_at":"2026-10-30T21:18:15+00:00","triaged_at":"2026-10-30T21:18:15+00:00","updated_at":"2026-10-30T21:18:15+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":"done","analyst_note":null,"search":"'-10':41B '-202610':23A '-30':42B '11':58B '13':62B '2026':40B '43':59B '58':63B 'addon':108B,119B,130B 'affect':146B,155B 'ai':3A,16A,27A,94B 'alert':56B 'alreadi':19A,98B 'anyon':131B 'api':17A,95B 'app':4A,28A 'assum':70B 'attack':8A,102B,149B,151B 'attackers':32A 'breach':7A 'breached':31A 'build':110B 'byoc':143B 'campaign':35B 'certif':106B 'cmp':22A 'compon':104B 'confirm':44B,92B 'custom':10A,68B,91B,156B,160B 'd':33A 'databas':136B 'decrypt':9A,76B 'deploy':144B 'disabl':126B 'disable/rotate':79B 'earli':37B 'early-warn':36B 'enabl':123B 'environ':11A,72B 'everi':71B 'exposur':128B 'find':165B 'global':88B 'group':86B 'host':5A 'hosting':29A 'impact':167B 'incid':47B 'job':109B,134B 'key':18A,81B,96B 'log':111B 'major':114B 'mongodb':118B 'multipl':90B 'network':105B 'northflank':1A,25A,34A,43B,124B,138B 'northflank-paas-ai-app-hosting-platform-breached-attackers-d':24A 'number':153B 'outag':115B 'paa':2A 'paas':26A 'page':51B 'platform':6A,30A,103B 'postgr':116B 'public':127B 'recommend':125B 'report':161B 'risk':141B 'rotat':121B,162B 'run':132B 'secret':14A,82B,85B,89B,120B,163B 'secur':46B 'sentri':158B 'servic':107B 'status':50B 'stolen':15A 'threat':55B 'told':66B 'unknown':148B,157B 'use':21A,100B 'utc':60B,64B 'variabl':12A,73B 'vector':150B 'warn':38B 'whether':142B 'wiz':54B 'workload':84B,133B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"first_public_at":"2026-10-30T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202610-northflank-paas-ai-app-hosting-platform-breached-attackers-d","url":null,"severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-30T21:18:15+00:00","fetched_at":"2026-10-30T21:18:15+00:00","note":null}],"documents":[{"id":25845,"url":"https://news.ycombinator.com/item?id=50309881","title":"Northflank is breached – Another wakeup call","kind":"post","source":"hackernews","publisher":null,"text":"Northflank is breached – Another wakeup call\nhttps://railyard.run/\n\n1 points, 0 comments on Hacker News","published_at":"2026-10-30T20:43:02+00:00","relation":"describes","confidence":null,"note":null},{"id":25973,"url":"https://status.northflank.com/cmvv0rn5a092f14rutwccodpp","title":"Northflank status: Security incident","kind":"vendor","source":"analyst","publisher":null,"text":"Northflank status page, Security incident, Identified, Major outage (Networking, Certificates, Services, Addons, Jobs, Builds, Logs and Metrics). Timeline: 11:43 UTC Wiz threat alert; 11:44 engineers review; 12:02 initial network policy patch; 12:50 and 13:05 additional patching; 13:00 Wiz CIRT support requested. 13:40 UTC Investigating: rotate environment variables immediately. 13:58 UTC Identified: assume all environment variables have been decrypted, disable/rotate all keys. 15:12 UTC Update: secret rotation on Postgres and MongoDB enabled for all users; recommend disabling public expose on addons; all users should assume their environment variables are decrypted and rotate immediately: secrets on workloads, secret groups, global secrets. Multiple users are confirming their AI keys have been used. Attack vector not stated. Sentry (Northflank customer) says it rotated secrets and found no impact.","published_at":"2026-10-30T00:00:00+00:00","relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}