{"id":"INC-apify-jrmh05vgscll","kind":"incident","aliases":[],"related":[],"title":"Apify: degraded performance on our API","description":"All systems are operational now. \n\nBetween 1:00 a.m. and 2:00 a.m. (CET), we experienced a high load on our platform, which may have led to degraded performance and slowed down our services during that timeframe.\n\nThe error caused a data duplication resulting in a ~30 of users being overcharged by 10 USD on average, and some of the storage and run statistics were duplicated. The underlying issue has been addressed and we’ll be contacting and refunding the impacted users.","summary":null,"severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Apify","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apify","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2025-06-03T00:16:10+00:00","first_seen_at":"2026-11-12T15:06:32+00:00","triaged_at":"2026-11-12T15:07:42+00:00","updated_at":"2026-11-12T15:07:42+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'00':23C,27C '1':22C '10':68C '2':26C '30':62C 'a.m':24C,28C 'address':87C 'api':6A 'apifi':1A,12B 'apify':9A,11A 'averag':71C 'caus':55C 'cet':29C 'contact':92C 'data':57C 'degrad':2A,43C 'duplic':58C,81C 'error':54C 'experienc':31C 'high':33C 'impact':96C 'inc':8A 'inc-apify-jrmh05vgscll':7A 'incid':13B 'issu':84C 'jrmh05vgscll':10A 'led':41C 'll':90C 'load':34C 'may':39C 'op':14B 'oper':19C 'overcharg':66C 'perform':3A,44C 'platform':37C 'refund':94C 'result':59C 'run':78C 'servic':49C 'slow':46C 'statist':79C 'storag':76C 'system':17C 'timefram':52C 'under':83C 'usd':69C 'user':64C,97C 'vendor':15B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["apify"],"ptokens":["apify"],"labels":["apify","incident","medium","ops","vendor"],"campaign_type":null,"search_a":"'api':6A 'apifi':1A 'apify':9A,11A 'degrad':2A 'inc':8A 'inc-apify-jrmh05vgscll':7A 'jrmh05vgscll':10A 'perform':3A","search_b":"'apifi':12B 'incid':13B 'op':14B 'vendor':15B","search_c":"'00':23C,27C '1':22C '10':68C '2':26C '30':62C 'a.m':24C,28C 'address':87C 'averag':71C 'caus':55C 'cet':29C 'contact':92C 'data':57C 'degrad':43C 'duplic':58C,81C 'error':54C 'experienc':31C 'high':33C 'impact':96C 'issu':84C 'led':41C 'll':90C 'load':34C 'may':39C 'oper':19C 'overcharg':66C 'perform':44C 'platform':37C 'refund':94C 'result':59C 'run':78C 'servic':49C 'slow':46C 'statist':79C 'storag':76C 'system':17C 'timefram':52C 'under':83C 'usd':69C 'user':64C,97C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2025-06-03T00:16:10+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"apify:jrmh05vgscll","url":"https://stspg.io/lzyqzc8vh201","severity":"medium","published_at":"2025-06-03T00:16:10+00:00","modified_at":"2025-06-15T15:56:31+00:00","first_seen_at":"2026-11-12T15:06:32+00:00","fetched_at":"2026-11-12T15:56:32+00:00","note":null}],"documents":[],"disclosures":[{"company":"Apify","domain":"apify.com","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November 2026, an unauthorized third party gained access to parts of Apify’s internal systems.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:05:57+00:00","entry":"stolen-credential"},{"company":"Apify","domain":"stspg.io","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November, an unauthorized third party used a compromised credential to obtain a number of account credentials and accessed related Apify accounts.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:15:49+00:00","entry":"stolen-credential"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}