Cloud application hosting platform Northflank has warned customers to immediately rotate all credentials stored on its platform after a security breach led to unauthorized use of customers’ AI API keys, with the company telling customers to assume all environment variables had been decrypted.
Northflank disclosed the security incident on October 30 after receiving a threat alert from cloud security company Wiz. The company later told customers to assume their environment variables had been decrypted and that the secrets stored within them were stolen.
Northflank is a cloud platform that lets developers deploy and manage applications, containers, databases, and AI applications without managing the underlying infrastructure. Applications commonly use environment variables to store sensitive information such as database passwords, cloud service credentials, authentication tokens, and API keys. If exposed, these credentials can be used to breach other customer services, potentially leading to data theft or unauthorized charges.
"Assume all environment variables have been decrypted. Disable/rotate all keys," Northflank warned in an October 30 update. The company later confirmed that multiple customers had reported unauthorized use of AI API keys stored on the platform. "Users have reported unauthorised use of AI API keys supplied to the Northflank platform," the company said. "If you have not already rotated your user-provided secrets stored in Northflank, please do so immediately."
Customers were advised to review their AI provider usage and billing logs for unexpected activity and to report suspicious usage to Northflank and their AI providers. Northflank has not disclosed how attackers gained access to its systems, how many customers were affected, or whether credentials other than AI API keys were stolen or abused. As part of its response, the company enabled credential rotation for PostgreSQL, MongoDB, MySQL, and Redis, and enabled audit logs for all customers, including free accounts.
Northflank did not respond to questions from BleepingComputer about the breach or its impact.
The incident is part of what Wiz has called “Black October”, a series of at least nine security incidents affecting AI development platforms during the month, including Railway, OpenCode, Warp, and Lightning AI. Wiz says attackers involved in some of these incidents have specifically targeted environment variables containing AI service credentials. LLMJacking involves using stolen credentials to access AI models via another organization’s API keys, generating massive AI charges or allowing stolen access to be resold. In two cases Wiz investigated, compromised enterprise credentials were used to make about 2.5 million Amazon Bedrock API calls, generating approximately $100,000 in AI usage. Wiz has not confirmed that all nine incidents were conducted by the same attackers, but many involved attempts to steal AI API keys.
Northflank referenced Wiz's research in its incident updates, noting that customer reports of unauthorized AI key usage may be tied to the attacks seen by the researchers.
Analysis
Why This Matters
- Developers using cloud platforms like Northflank face immediate risk of credential exposure, potentially leading to costly unauthorized AI API usage or data breaches.
- The incident underscores a broader trend of attackers targeting AI development platforms, where stored API keys provide access to expensive AI services.
- Organizations may need to reassess security practices around environment variable management and credential rotation.
Background
Northflank is a cloud application hosting platform competing with services like Heroku and Railway. The breach occurred in October 2026 and was detected by cloud security company Wiz. The attack is part of a pattern Wiz calls "Black October," with at least nine AI development platforms breached in a month. Attackers are using stolen API keys for LLMJacking, accessing AI models via a victim's account to generate charges or resell access.
Key Perspectives
Northflank: Warns customers to assume all environment variables have been decrypted and to immediately rotate all credentials, including AI API keys. The company has enabled audit logs and credential rotation for databases as a response.
Wiz: Reports that AI development platforms are valuable targets due to stored AI API keys. Identified at least nine security incidents in October and described LLMJacking as a growing attack vector, with one case generating $100,000 in unauthorized AI usage.
What to Watch
- Whether Northflank discloses the root cause of the breach and the number of affected customers.
- Whether additional reports of unauthorized AI API usage from other platforms emerge.
- How AI providers respond to this wave of credential theft, possibly with tighter rate limiting or anomaly detection.
Checked
12 claims in this story checked against 1 source: 12 supported.
Show each claim
- SupportedThe Northflank breach led to unauthorized use of customers’ AI API keys.BleepingComputer: “Northflank security breach leads to abuse of customers' AI API keys. Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.”
- SupportedNorthflank warned customers to rotate credentials stored on its platform.BleepingComputer: “Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.”
- SupportedNorthflank told customers to assume their environment variables had been decrypted.BleepingComputer: “Soon after, Northflank told all customers to assume their environment variables had been decrypted and that the secrets stored within them were stolen.”
- SupportedCustomer reports of unauthorized AI key use may be tied to attacks identified by Wiz.BleepingComputer: “Northflank also referenced Wiz's research in its incident updates, noting that customer reports of unauthorized AI key usage may be tied to the attacks seen by the researchers.”
- SupportedNorthflank disclosed the incident on October 30 after receiving a threat alert from Wiz.BleepingComputer: “The company disclosed a security incident on October 30, warning customers to immediately rotate their environment variables and API keys after receiving a threat alert from cloud security company Wiz.”
- SupportedNorthflank warned, “Assume all environment variables have been decrypted. Disable/rotate all keys,” in an October 30 update.BleepingComputer: “"Assume all environment variables have been decrypted. Disable/rotate all keys," Northflank warned in an October 30 update.”
- SupportedNorthflank confirmed that multiple customers had reported unauthorized use of AI API keys stored on the platform.BleepingComputer: “Northflank later confirmed that multiple customers had reported unauthorized use of AI API keys stored on the platform.”
- SupportedNorthflank asked customers who had not rotated user-provided secrets to do so immediately.BleepingComputer: “"If you have not already rotated your user-provided secrets stored in Northflank, please do so immediately."”
- SupportedCustomers were advised to check AI provider usage and billing logs for unexpected activity and report suspicious usage.BleepingComputer: “Customers were also advised to review their AI provider usage and billing logs for unexpected activity and report suspicious usage to Northflank and their AI providers.”
- SupportedNorthflank has not disclosed how attackers gained access, how many customers were affected, or whether credentials beyond the reported AI API keys were stolen or abused.BleepingComputer: “The company has not disclosed how attackers gained access to its systems, how many customers were affected, or whether attackers stole or abused credentials other than the reported AI API keys.”
- SupportedWiz identified at least nine security incidents affecting AI development platforms during the month.BleepingComputer: “In a report titled " Black October for AI Developer Platforms ," Wiz identified at least nine security incidents affecting AI development platforms during the month”
- SupportedIn two cases investigated by Wiz, compromised enterprise credentials were used for approximately 2.5 million Amazon Bedrock API calls, generating approximately $100,000 in AI usage.BleepingComputer: “In two cases investigated by Wiz, compromised enterprise credentials were used to make approximately 2.5 million Amazon Bedrock API calls, generating approximately $100,000 in AI usage.”
