Northflank breach exposes customer secrets and leads to AI API key abuse

Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI workloads without managing the underlying infrastructure, has disclosed a security breach that exposed customer secrets and led to the abuse of stored AI API keys, BleepingComputer reported on October 31, 2026.

What happened

According to BleepingComputer, Northflank disclosed the incident on October 30, 2026 and told customers to rotate their environment variables and API keys after cloud security company Wiz issued a threat alert. Northflank subsequently told customers to assume their environment variables had been decrypted and that the secrets inside them were stolen, posting the blunt guidance: "Assume all environment variables have been decrypted. Disable/rotate all keys." Because environment variables commonly hold database passwords, cloud credentials, authentication tokens and API keys, the company warned that the exposure could enable further breaches or unauthorized charges.

Northflank later confirmed that multiple customers reported unauthorized use of AI API keys stored on the platform. The company said those reports may be tied to the activity Wiz documented. BleepingComputer notes that the exact method of abuse was not described.

The LLMJacking angle

BleepingComputer places the activity in the context of "LLMJacking," in which stolen credentials are used to run AI models on another organization's account, generating large charges or letting access be resold. The outlet reports that Wiz investigated two cases in which compromised enterprise credentials were used for roughly 2.5 million Amazon Bedrock API calls, at a cost of about $100,000.

A wider wave

The incident does not appear to be isolated. According to BleepingComputer, Wiz's report, titled "Black October for AI Developer Platforms," identified at least nine incidents in October affecting AI development platforms, including Northflank, Railway, OpenCode, Warp and Lightning AI. Wiz has not confirmed that the same attackers were behind all of them, but many involved attempts to steal AI API keys.

What is still unknown

Northflank has not said how many customers were affected, how the attackers gained access, or whether credentials beyond the reported AI API keys were stolen or abused, BleepingComputer reports, adding that its questions to the company had not been answered at publication time. According to the timeline Northflank published, Wiz warned it at 11:43 UTC on October 30, engineers reviewed the alert about a minute later, and the company deployed a network policy patch followed by further patches at 12:50 and 13:05, while also requesting help from Wiz's incident response team.

What to do

BleepingComputer's guidance for affected customers is to rotate all secrets, environment variables and API keys stored on the platform, including those in workloads, secret groups and global secrets, as well as any user-provided secrets. Customers should review AI provider usage and billing logs for unexpected activity, report suspicious usage to Northflank and to their AI providers, use the newly enabled audit logs to investigate, and disable public access to add-ons where it is enabled. Northflank said it has enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis and turned on audit logs for all customers, including free accounts.