Northflank Breach Exposes Environment Variables
Northflank disclosed a major security incident affecting its platform, warning users that environment variables and secrets may have been decrypted. The company recommends immediately rotating keys, including AI provider credentials, and disabling public addon exposure.
This is a serious supply-chain-style failure for a platform trusted with deployment credentials and production secrets.
- –Northflank says multiple users have confirmed unauthorized use of AI keys.
- –The incident affects workload secrets, secret groups, global secrets, Postgres, and MongoDB.
- –Developers should rotate environment variables, API tokens, database credentials, and cloud-provider keys immediately.
- –BYOC users may have reduced workload exposure, but Northflank control-plane credentials still require review.
- –The breach highlights the risk of centralizing deployment, secrets, databases, and AI infrastructure behind one control plane.
DISCOVERED
1h ago
2026-10-30
PUBLISHED
2h ago
2026-10-30
RELEVANCE
AUTHOR
js4ever