# Northflank tells customers to assume every environment variable was decrypted after AI keys are abused

Source: https://startwithidentity.com/blog/2026-10-30-northflank-tells-customers-to-assume-environment-variables-were-decrypted/
Last updated: 2026-11-05
License: content by Start with Identity. Cite the source URL.

---

Cloud hosting platform Northflank told customers on October 30 to "assume all environment variables have been decrypted" and to disable and rotate every key, after a threat alert from [Wiz](https://startwithidentity.com/vendors/ciem/wiz/) at 11:43 UTC that morning. According to its status page, engineers began patching network policy at 12:02 and asked for Wiz's incident response team at 13:00. By that evening customers had reported unauthorized use of AI API keys stored on the platform, and Northflank told them to revoke credentials at each provider and review usage and billing logs. It turned on audit logs for every account, including free ones, and over the next day shipped secret rotation for its Postgres, MongoDB, MySQL, Redis, Minio and RabbitMQ add-ons. Northflank has not said how the attacker got in or how many customers were affected.

## Why it matters

Wiz's "Black October" report, published the same day, counts nine incidents at AI developer platforms in October, including [OpenCode](https://startwithidentity.com/blog/2026-10-17-opencode-console-breach-may-have-exposed-users-ai-provider-keys/), [Zeabur](https://startwithidentity.com/blog/2026-10-19-zeabur-to-shut-down-after-a-non-expiring-admin-token-opened-its-shared-cluster/), [Railway](https://startwithidentity.com/blog/2026-10-22-railway-says-attacker-decrypted-environment-variables-in-up-to-100000-workspaces/), Warp and Northflank, with attackers hunting environment variables that grant AI access. It found "no single vulnerability or dependency linking these attacks." A platform that decrypts customer secrets for its workloads is one place to steal everyone's [non-human identities](https://startwithidentity.com/guides/fundamentals/what-is-non-human-identity/).

If you ran on Northflank, rotate at the provider, not just in the platform, and check AI billing first, since that is where abuse shows. Everywhere else, prefer short-lived credentials through [workload identity federation](https://startwithidentity.com/glossary/workload-identity-federation/) where a provider supports it, and put spend limits on AI keys. The pattern is [static API key abuse](https://startwithidentity.com/techniques/static-api-key-abuse/).

**Update, November 5, 2026:** In a November 2 status update, Northflank said the attack was contained within an hour of the first alert, appeared focused on control plane secrets, and did not affect running workloads or dedicated and forward-deployed control planes. It patched the Linux kernel TCP flaw CVE-2026-98432 across its fleet and revoked certain tokens, sessions, VCS integrations and cross-account IAM roles. It plans to publish a root cause analysis.

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/)