Northflank breach: AI API keys abused, 9 dev platforms hit
Northflank says customers saw stolen AI API keys used after its Oct 30 breach. Wiz counts nine AI dev platforms hit in October. Rotate and cap every key.
The Northflank breach is the ninth AI developer platform incident Wiz has counted this October, and it is the one where the damage is on record. On its status page, Northflank tells every customer to assume all environment variables were decrypted, and it confirms that "users have reported unauthorised use of AI API keys" stored on the platform. Someone is harvesting model keys at scale and spending them.
What actually happened
From Northflank's own incident timeline:
- October 30, 11:43 UTC: the first event is a Wiz threat alert. Northflank opened the incident at 13:40 UTC.
- Target: secrets held in the control plane, across workloads, secret groups and global secrets. Northflank says it has seen no sign that running workloads or their data were accessed. Dedicated and forward-deployed control planes are not affected.
- Instruction: rotate everything, integration secrets and project secrets, even with no suspicious activity. Start with AI provider keys, cloud credentials, payment keys, private keys and database credentials.
- Abuse: several customers report that their AI keys were used. Northflank tells anyone with unexpected AI spend to contact OpenAI, Anthropic or their provider directly.
- Fixes: one-click rotation for Postgres, MongoDB, MySQL, Redis, MinIO and RabbitMQ add-ons. Audit logs are now on for every account, free tier included. It also revoked sessions, VCS integrations and cross-account IAM roles, and says it patched CVE-2026-98432 across its fleet.
Still unknown: how the attacker got in, who they are, and how many customers were hit. Northflank says a root cause analysis will follow once findings are confirmed.
Wiz's Black October report puts Northflank on a list with Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp and CommandCode. Wiz finds no single shared vulnerability. What links them is the target: stored environment variables, especially the ones that unlock AI access. Wiz also traced two abuse cases with stolen keys, roughly 800,000 and 1.7 million model calls, which it estimates ran past $100,000 at list price. Wiz does not say those keys came from Northflank, and neither do we.
Why the Northflank breach matters for your business
A model key is cash with no PIN. A stolen database password needs work to monetize. A stolen model key gets resold and burned the same day, and the invoice is yours. That is why attackers go to the env panel first.
Nine vendors in one month is not bad luck. If your keys live only in your host's dashboard, your security is theirs. Rotation must be a 30-minute runbook, not a scramble.
Caps beat rotation. Rotation stops the bleeding after you notice it. A hard monthly spend limit and a usage alert on each key stop the bleeding before you notice it.
Key takeaways
- Northflank disclosed a control-plane breach on October 30 and says to assume all environment variables were decrypted
- Customers report unauthorized use of AI API keys stored on the platform
- Wiz counts at least nine AI developer platforms with disclosed incidents in October 2026
- Root cause, attacker and affected-customer count are not yet published
- Rotate AI, payment and cloud keys first, then put a spend cap and alert on every model key
One key per job, one cap per key. We split your AI keys by workload, set hard spend limits at the provider, and write the rotation runbook before you need it, so the next platform breach costs an afternoon, not a five-figure model bill. Book a secrets review, or see how we build.
Sources: Northflank status page, Wiz: Black October for AI Developer Platforms.
- #northflank
- #security breach
- #llmjacking
- #ai api keys
- #secrets management
Tommy Rush — Founder, Rush Commerce
Operator turned builder. 15+ years running operations — now shipping the systems businesses run on. More
Get The Rush Report weekly — one email, zero fluff.
Keep reading
Trigger.dev security incident: rotate your job secrets now
Trigger.dev says an attacker reached environment variables for a subset of orgs on November 1. Second env-var breach in two weeks. Rotate and cap keys now.
Read itMicrosoft: North Korean hackers run AI across hiring scams
Microsoft says North Korean hackers use AI for fake recruiters, AI-built resumes and trojanized private GitHub repos. How a small team vets hires and locks repos.
Read it