Northflank breach leads to abuse of customers' AI API keys
Northflank, a cloud platform for deploying applications, containers and AI tools, disclosed a security incident on October 30 after the security firm Wiz alerted it to suspicious activity. Northflank told customers to assume their environment variables had been decrypted and to immediately rotate database credentials, cloud keys and tokens, and it confirmed that multiple customers reported unauthorized use of their AI API keys. The company has not explained how its systems were breached, but it enabled audit logs for all accounts, including free ones, and advised customers to check AI provider billing logs for suspicious usage. Wiz places the incident within a wave of at least nine attacks this October against AI development platforms, where stolen keys were used to run AI workloads at the victim's expense, a technique known as LLMjacking, with one case costing roughly $100,000 in Amazon Bedrock calls. For any business building AI applications on a third-party cloud platform, the incident shows that a stolen API key is not just a data breach, it is a direct, real-money cost for as long as it stays active.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.