Northflank Breached

Northflank - Status Page Update · October 30, 2026 at 3:12 PM UTC Secret rotation on Postgres and MongoDB has been enabled for all users. We recommend disabling public expose on addons if you have enabled that. All users should assume their environment variables are decrypted and begin rotation immediately. Secrets on workloads Secret groups Global secrets Multiple users are confirming that their AI keys have been used. Secret rotation on Postgres and MongoDB has been enabled for all users. We recommend disabling public expose on addons if you have enabled that. All users should assume their environment variables are decrypted and begin rotation immediately. Secrets on workloads Secret groups Global secrets Multiple users are confirming that their AI keys have been used. Identified · October 30, 2026 at 1:58 PM UTC Assume all environment variables have been decrypted. Disable/rotate all keys. Assume all environment variables have been decrypted. Disable/rotate all keys. Investigating · October 30, 2026 at 1:40 PM UTC Rotate environment variables immediately. 11:43 UTC: Wiz threat alert 11:44 UTC: Northflank engineers review the alert 12:02 UTC: Initial network policy patch 12:50 UTC: Additional patching deployed 13:00 UTC: Wiz CIRT support requested 13:05 UTC: Additional patching deployed 13:05 UTC: Additional patching deployed Rotate environment variables immediately. 11:43 UTC: Wiz threat alert 11:44 UTC: Northflank engineers review the alert 12:02 UTC: Initial network policy patch 12:50 UTC: Additional patching deployed 13:00 UTC: Wiz CIRT support requested 13:05 UTC: Additional patching deployed 13:05 UTC: Additional patching deployed Collapse group Networking - Major outage Networking Certificates - Major outage Services - Major outage Addons - Major outage Jobs - Major outage Builds - Major outage Logs and Metrics - Major outage Logs and Metrics Northflank App - Operational Northflank API - Operational Marketing Site - Operational Documentation - Operational Recent notices