{"id":"INC-apify-3nzj1sphw18n","kind":"incident","aliases":[],"related":[],"title":"Apify: Google SERP","description":"This incident has been resolved.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Apify","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apify","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2025-01-16T13:15:01+00:00","first_seen_at":"2026-11-12T15:06:33+00:00","triaged_at":"2026-11-12T15:07:42+00:00","updated_at":"2026-11-12T15:07:42+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'3nzj1sphw18n':7A 'apifi':1A,9B 'apify':6A,8A 'googl':2A 'inc':5A 'inc-apify-3nzj1sphw18n':4A 'incid':10B,14C 'op':11B 'resolv':17C 'serp':3A 'vendor':12B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["apify"],"ptokens":["apify"],"labels":["apify","critical","incident","ops","vendor"],"campaign_type":null,"search_a":"'3nzj1sphw18n':7A 'apifi':1A 'apify':6A,8A 'googl':2A 'inc':5A 'inc-apify-3nzj1sphw18n':4A 'serp':3A","search_b":"'apifi':9B 'incid':10B 'op':11B 'vendor':12B","search_c":"'incid':14C 'resolv':17C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2025-01-16T13:15:01+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"apify:3nzj1sphw18n","url":"https://stspg.io/vxl3r7x7wc0d","severity":"critical","published_at":"2025-01-16T13:15:01+00:00","modified_at":"2025-01-16T13:17:04+00:00","first_seen_at":"2026-11-12T15:06:33+00:00","fetched_at":"2026-11-12T15:56:32+00:00","note":null}],"documents":[],"disclosures":[{"company":"Apify","domain":"apify.com","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November 2026, an unauthorized third party gained access to parts of Apify’s internal systems.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:05:57+00:00","entry":"stolen-credential"},{"company":"Apify","domain":"stspg.io","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November, an unauthorized third party used a compromised credential to obtain a number of account credentials and accessed related Apify accounts.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:15:49+00:00","entry":"stolen-credential"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}