What happened when Northflank’s AI keys were stolen #cybersecurity #AI #hacking

Customers of this platform as a service say their AI keys were used without permission. Northflank hosts applications, databases and AI workloads.

After the security incident, the company warned customers to assume their stored environment variables had been compromised. Those variables can contain database passwords, cloud credentials and API keys.

Customers have reported unauthorised AI usage, and that can mean unexpected charges, but also potentially access to other connected services. Northflank has enabled audit logs and expanded its credential rotation tools.

If you host applications there, revoke the old keys with their original providers, replace them in every workload and check your usage logs. Changing a key inside Northflank doesn’t invalidate a stolen copy.