Northflank Breach Exposes AI Keys; Immediate Rotation Urged
Cloud-native platform Northflank suffered a major security breach exposing decrypted environment variables and secrets. Users are urged to immediately rotate all AI keys as multiple core services face significant outages.
Full Report
[Security incidentIdentified·Major outage
- Update · October 30, 2026 at 3 PMUTC
All users should assume their environment variables are decrypted and begin rotation immediately.
Secrets on workloads
Secret groups
Global secrets
Multiple users are confirming that their AI keys have been used.
- Identified · October 30, 2026 at 1 PMUTC
Assume all environment variables have been decrypted. Disable/rotate all keys.
- Investigating · October 30, 2026 at 1 PMUTC
Rotate environment variables immediately.
11 UTC: Wiz threat alert
11 UTC: Northflank engineers review the alert
12 UTC: Initial network policy patch 12 UTC: Additional patching deployed
13 UTC: Wiz CIRT support requested
13 UTC: Additional patching deployed
13 UTC: Additional patching deployed](https://status.northflank.com/cmvv0rn5a092f14rutwccodpp)99.87% uptime
Networking - Major outage
Networking
Major outage
Certificates - Major outage
CertificatesMajor outage
Services - Major outage
ServicesMajor outage
Addons - Major outage
AddonsMajor outage
Jobs - Major outage
JobsMajor outage
Builds - Major outage
BuildsMajor outage
Logs and Metrics - Major outage
Logs and Metrics
Major outage
Northflank App - Operational
Northflank App99.82% uptime
Northflank API - Operational
Northflank API100.0% uptime
Marketing Site - Operational
Marketing Site100.0% uptime
Documentation - Operational
Documentation100.0% uptime90 days agoToday