---
id: "CMP-202610-northflank-paas-ai-app-hosting-platform-breached-attackers-d"
kind: "campaign"
aliases: []
title: "Northflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used"
severity: "critical"
cvss: null
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Northflank", "fixed": [], "affected": "all customers (BYOC status unknown)", "ecosystem": "saas"}]
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-10-30T21:18:15+00:00"
updated_at: "2026-10-30T21:18:15+00:00"
sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-10-30T21:18:15+00:00"}]
---

# Northflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used

On 2026-10-30 Northflank confirmed a security incident on its status page after a Wiz threat alert at 11:43 UTC. At 13:58 UTC it told all customers to assume every environment variable has been decrypted and to disable/rotate all keys: secrets on workloads, secret groups and global secrets. Multiple customers confirm their AI API keys have already been used by attackers. Platform components (networking, certificates, services, addons, jobs, builds, logs) were in major outage. Postgres and MongoDB addon secret rotation was enabled; Northflank recommends disabling public exposure on addons. Anyone running workloads, jobs or databases on Northflank is at risk; whether BYOC deployments are affected is unknown. Attack vector, attacker and number of affected customers unknown. Sentry, a customer, reports rotating secrets and finding no impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- saas:Northflank affected all customers (BYOC status unknown) fixed ?

## How to check

- Check whether your team has any project, service, job, secret group or addon on Northflank (northflank.com)
- Review usage and billing logs of every API key stored there (OpenAI, Anthropic and other AI providers, cloud, database, SaaS tokens) for use from 2026-10-30 onward, or earlier; when access started is unknown
- Check Postgres/MongoDB addons with public exposure enabled for unknown connections

## Fix

- Rotate every secret stored in Northflank now (workload secrets, secret groups, global secrets), starting with AI provider keys and cloud credentials; revoke the old values at the provider, not just in Northflank
- Rotate Postgres and MongoDB addon credentials (Northflank has enabled rotation) and turn off public exposure on addons
- Follow status.northflank.com for the root cause and further steps

## Timeline

- 2026-10-30T21:18:15+00:00 analyst

## Documents

- [describes] Northflank is breached – Another wakeup call https://news.ycombinator.com/item?id=50309881
- [describes] Northflank status: Security incident https://status.northflank.com/cmvv0rn5a092f14rutwccodpp

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_