Northflank is a cloud platform that allows developers to deploy and manage applications, containers, databases, and AI applications without managing the underlying infrastructure. The company disclosed a security incident on October 30, warning customers to immediately rotate their environment variables and API keys after receiving a threat alert from cloud security company Wiz. Soon after, Northflank told all customers to assume their environment variables had been decrypted and that the secrets stored within them were stolen.
"Assume all environment variables have been decrypted. Disable/rotate all keys," Northflank warned in an October 30 update. Applications commonly use environment variables to store sensitive information, including database passwords, cloud service credentials, authentication tokens, and API keys.
If exposed, these credentials can be used to breach other customer services, potentially leading to data theft or unauthorized charges through API keys. Northflank later confirmed that multiple customers had reported unauthorized use of AI API keys stored on the platform.
