{"id":"INC-apify-hqmh196j66zq","kind":"incident","aliases":[],"related":[],"title":"Apify: Unintended breaking change in Actor run API endpoint","description":"This incident has been resolved.","summary":null,"severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Apify","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apify","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2025-10-29T19:06:38+00:00","first_seen_at":"2026-11-12T15:06:31+00:00","triaged_at":"2026-11-12T15:07:42+00:00","updated_at":"2026-11-12T15:07:42+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'actor':6A 'api':8A 'apifi':1A,15B 'apify':12A,14A 'break':3A 'chang':4A 'endpoint':9A 'hqmh196j66zq':13A 'inc':11A 'inc-apify-hqmh196j66zq':10A 'incid':16B,20C 'op':17B 'resolv':23C 'run':7A 'unintend':2A 'vendor':18B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["apify"],"ptokens":["apify"],"labels":["apify","incident","medium","ops","vendor"],"campaign_type":null,"search_a":"'actor':6A 'api':8A 'apifi':1A 'apify':12A,14A 'break':3A 'chang':4A 'endpoint':9A 'hqmh196j66zq':13A 'inc':11A 'inc-apify-hqmh196j66zq':10A 'run':7A 'unintend':2A","search_b":"'apifi':15B 'incid':16B 'op':17B 'vendor':18B","search_c":"'incid':20C 'resolv':23C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2025-10-29T19:06:38+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"apify:hqmh196j66zq","url":"https://stspg.io/n1w68szkzr4f","severity":"medium","published_at":"2025-10-29T19:06:38+00:00","modified_at":"2025-10-29T20:21:34+00:00","first_seen_at":"2026-11-12T15:06:31+00:00","fetched_at":"2026-11-12T15:57:58+00:00","note":null}],"documents":[],"disclosures":[{"company":"Apify","domain":"apify.com","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November 2026, an unauthorized third party gained access to parts of Apify’s internal systems.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:05:57+00:00","entry":"stolen-credential"},{"company":"Apify","domain":"stspg.io","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November, an unauthorized third party used a compromised credential to obtain a number of account credentials and accessed related Apify accounts.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:15:49+00:00","entry":"stolen-credential"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}