Northflank says rotate every stored secret now—what should customers do first?
Northflank says customers should assume user-defined environment variables were exposed. Reports of unauthorized AI API-key use make this an active remediation incident, but the company has not published how many customers or credentials were affected.
The short version
- What happened
- Northflank's status page remains in an Identified/Major outage state and tells customers to assume all user-defined environment variables were decrypted.
- Who it affects
- Developers and small teams may discover unauthorized AI charges before they notice broader account access. A rushed rotation can also cause outages, so incident owners need an inventory, clean administrative sessions and a record of which credentials were revoked, replaced and tested.
- What remains unproven
- Northflank has not published an affected-customer, key, workload, charge or data-access denominator.
Keep in mind
Northflank has not published an affected-customer, key, workload, charge or data-access denominator.
The root cause, dwell time and exact data-access path remain undisclosed. The instruction to assume exposure is broader than the currently proven downstream misuse.
The status page is changing. Readers should follow the maintained incident record rather than relying only on this snapshot.
Multi-source analysis · 2 linked sources. Primary analysed source date: 30 October 2026. Latest linked supporting source: 31 October 2026.
Read the full report · 4 min The evidence, methods, implications and limitations
The urgent task is revocation, not simply editing a platform field
Northflank is telling customers to treat every user-defined secret stored on its platform as compromised. Its public incident page says users have reported unauthorized use of AI API keys, while the investigation remains open and seven platform components are marked as experiencing a major outage. The current instruction covers environment variables in workloads, secret groups and global secrets. It also extends beyond AI providers: database passwords, cloud credentials, signing keys, webhooks and service tokens may occupy the same stores.
The first recovery step is to revoke each credential with the organization that issued it. Deleting or replacing a value only inside Northflank does not invalidate a copy that an attacker may already hold. Teams should generate a new credential from a clean, trusted session, update the relevant workload or managed add-on, and restart or redeploy only after the old value is unusable. Northflank has progressively enabled rotation for Postgres, MongoDB, MySQL, Redis, Minio and RabbitMQ add-ons, and it has enabled audit logs for free as well as paid customers.[1][2]
AI-key abuse is confirmed; the size and path of the breach are not
After revocation, customers need to review AI-provider usage and billing logs, cloud audit trails, database access, deployment history and outbound network activity for the period before rotation. Unexpected model calls can create direct charges, but a stolen key may also expose files, fine-tuning data or administrative functions depending on the provider and the key's permissions. Publicly exposed add-ons should be disabled during investigation. Organizations that find misuse should preserve logs and notify Northflank and the affected provider before normal retention windows erase evidence.
Northflank has published a response timeline beginning with a Wiz alert at 11:43 UTC on 30 October and several network-policy patches over the next 82 minutes. It has not yet published the vulnerability, dwell time, data-access path or final scope. Nor has it said whether every stored environment variable was actually read; its instruction is a precautionary assumption for safe recovery. The Breaking label therefore reflects the live remediation need, not a claim that every customer suffered downstream access. It will expire at 21:00 GMT unless a verified update warrants renewal or earlier removal.[1][2]
The distinction that matters
A safe order for rotating exposed secrets
Invalidate the old credential at its source before trusting a replacement stored on the platform.
Revoke
Disable the credential with its issuing provider
A copied value can no longer be used
Replace
Create a least-privilege replacement from a trusted session
Update only the workloads and add-ons that need it
Investigate
Review audit, usage, billing and network records
Identify misuse, preserve evidence and notify providers