Northflank: assume every environment variable is stolen, and customers say AI keys are already being used (status.northflank.com)
A Wiz alert at 11:43 UTC on October 30 started the incident. By the next day Northflank had enabled Postgres and MongoDB secret rotation for every customer, and turned on audit logs for all accounts, free ones included.
Users reported unauthorized use of their AI provider keys, and the company told them to revoke those with the issuers rather than wait.
Sign in to save