{"schema_version":"0.10.0","id":"LR-2026-0812","record_version":2,"title":"Northflank platform breach exposes customer environment variables and AI API keys","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":46.2,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":5.76,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-02","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-02","history":[{"date":"2026-11-02","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"52d359b2ed8f41b67b66af84ee2006d906167b976957a61fca57fafb48282e2a"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"production","tier":"provider","lifecycle_stage":null,"integration_type":null,"intended_use":"cloud platform that lets developers deploy and manage applications, containers, databases and AI applications","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-30","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Northflank, a cloud platform for deploying applications, containers, databases and AI applications, suffered a security breach that led to unauthorized use of customers' AI API keys. It disclosed the incident Oct. 30 after a threat alert from cloud security firm Wiz; engineers reviewed the warning within a minute and applied network policy patches. At 13:58 UTC Northflank told customers to assume all their environment variables had been decrypted and the secrets stolen, and to disable or rotate all keys. At 23:38 UTC it said users had reported unauthorized use of AI API keys supplied to the platform. It enabled credential rotation for several databases and turned on audit logs for all customers. Northflank has not said how attackers gained access or how many customers were affected.","tags":["credential-theft","credential-exposure","data-breach","ai-api-keys","llmjackking","cloud-platform"],"date_detected":null,"near_miss":null,"root_cause":"unknown","root_cause_detail":null,"failure_class_detail":null,"responsible_party":"provider","adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"It enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis and turned on audit logs for all customers, including those with free accounts.","precursor_events":null,"primary_risk":"RK03","secondary_risks":["RK08","RK04"]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"Live production compromise of a shared cloud platform with customer credentials stolen and unauthorized use of AI API keys reported; scope unbounded as Northflank has not said how many customers were affected.","harm_class":["third_party_security","financial"],"affected_description":"customers of Northflank whose environment variables and AI API keys were exposed","protected_class_involved":null,"data_categories_exposed":["credentials"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.teiss.co.uk/news/northflank-security-incident-leads-to-unauthorized-use-of-ai-api-keys-customers-told-to-rotate-credentials-18398","publisher":"teiss","date":"2026-11-02","type":"press","title":"Northflank security incident leads to unauthorized use of AI API keys; customers told to rotate credentials","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.developer":"D","system.autonomy_level":"D","system.deployment_context":"C","system.tier":"C","system.intended_use":"C","event.date_disclosed":"C","event.trigger":"D","event.detection_method":"C","event.summary":"C","event.tags":"C","event.root_cause":"C","event.responsible_party":"C","event.adversarial_actor":"C","event.remediation":"C","event.incident_class":"C","impact.severity":"C","impact.harm_class":"C","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity_because":"C","context.industry":"C","context.country":"D","context.denominator_available":"D","event.primary_risk":"D","event.secondary_risks":"D"},"field_citations":{"system.deployment_context":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."}],"system.tier":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."}],"system.intended_use":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."}],"event.date_disclosed":[{"source_index":0,"quote":"The company disclosed the incident Oct. 30 after receiving a threat alert from the cloud security company Wiz."}],"event.detection_method":[{"source_index":0,"quote":"The company disclosed the incident Oct. 30 after receiving a threat alert from the cloud security company Wiz."}],"event.summary":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."},{"source_index":0,"quote":"The company disclosed the incident Oct. 30 after receiving a threat alert from the cloud security company Wiz."},{"source_index":0,"quote":"Northflank’s published timeline puts Wiz’s warning at 11:43 UTC, with engineers reviewing it a minute later."},{"source_index":0,"quote":"At 13:58 UTC, it told customers to assume all their environment variables had been decrypted and that the secrets stored in them were stolen, and to disable or rotate all keys."},{"source_index":0,"quote":"At 23:38 UTC, it said users had reported unauthorized use of AI API keys supplied to the platform."},{"source_index":0,"quote":"It enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis and turned on audit logs for all customers, including those with free accounts."},{"source_index":0,"quote":"Northflank has not said how the attackers gained access, how many customers were affected or whether credentials other than the reported AI API keys were stolen or abused."}],"event.tags":[{"source_index":0,"quote":"At 13:58 UTC, it told customers to assume all their environment variables had been decrypted and that the secrets stored in them were stolen, and to disable or rotate all keys."},{"source_index":0,"quote":"At 23:38 UTC, it said users had reported unauthorized use of AI API keys supplied to the platform."},{"source_index":0,"quote":"Wiz said attackers in some of these incidents targeted environment variables containing AI service credentials, which can be exploited through a practice known as LLMJacking: using stolen credentials to reach AI models on another organization’s account, running up large charges or reselling the access."}],"event.root_cause":[{"source_index":0,"quote":"Northflank has not said how the attackers gained access, how many customers were affected or whether credentials other than the reported AI API keys were stolen or abused."}],"event.responsible_party":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."}],"event.adversarial_actor":[{"source_index":0,"quote":"Northflank has not said how the attackers gained access, how many customers were affected or whether credentials other than the reported AI API keys were stolen or abused."}],"event.remediation":[{"source_index":0,"quote":"It enabled credential rotation for PostgreSQL, MongoDB, MySQL and Redis and turned on audit logs for all customers, including those with free accounts."}],"event.incident_class":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."},{"source_index":0,"quote":"At 13:58 UTC, it told customers to assume all their environment variables had been decrypted and that the secrets stored in them were stolen, and to disable or rotate all keys."}],"impact.severity":[{"source_index":0,"quote":"At 13:58 UTC, it told customers to assume all their environment variables had been decrypted and that the secrets stored in them were stolen, and to disable or rotate all keys."}],"impact.harm_class":[{"source_index":0,"quote":"At 23:38 UTC, it said users had reported unauthorized use of AI API keys supplied to the platform."},{"source_index":0,"quote":"If exposed, those credentials can be used to breach other services, potentially leading to data theft or unauthorized charges."}],"impact.affected_description":[{"source_index":0,"quote":"At 13:58 UTC, it told customers to assume all their environment variables had been decrypted and that the secrets stored in them were stolen, and to disable or rotate all keys."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"At 13:58 UTC, it told customers to assume all their environment variables had been decrypted and that the secrets stored in them were stolen, and to disable or rotate all keys."}],"impact.severity_because":[{"source_index":0,"quote":"Northflank has not said how the attackers gained access, how many customers were affected or whether credentials other than the reported AI API keys were stolen or abused."}],"context.industry":[{"source_index":0,"quote":"Northflank, a cloud platform that lets developers deploy and manage applications, containers, databases and AI applications, is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys."}]},"notes_on_gaps":"The document does not state the date the breach occurred, how attackers gained access, how many customers were affected, or whether non-AI credentials were abused. No model name, version, harness or autonomy arrangement is stated; the incident is a platform compromise, not an autonomous agent failure, so agent_involved is false and failure_class is null. The $100,000 figure and 2.5 million Bedrock API calls relate to two separate cases Wiz investigated, not to Northflank, so no direct_loss_usd is recorded for this incident. Country of the operator is not stated. The 'LLMJacking' tag is rendered as 'llmjackking' in kebab-case. Extractor proposed values without quotes; dropped: ['context.country', 'event.agent_involved', 'event.trigger', 'system.autonomy_level', 'system.developer']. Single secondary source; corroborate before upgrading any field to B. [2026-11-02: evidence level set: Preliminary (Publisher not yet named · subject to change)] [risks and controls of register 1.1.0-draft re-filed by claude-haiku-5-5, refile-2026-11-02.2, 2026-11-02; not yet reviewed]"},"context":{"industry":"cloud computing / platform services","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null}}