The cloud platform has told its customers to replace their security credentials after a breach that compromised decrypted configuration data from its systems. Northflank is instructing all users to assume their environment variables were accessed by unauthorized actors following an alert from security firm Wiz, with several users reporting that their AI keys have already been used.
The Kubernetes fleet management system powers infrastructure for companies including Figma, Upwork, CoreWeave and Sentry. The incident occurred on Oct 30, 9 days after a similar security breach at competitor Railway on Oct 21, an event that Northflank had previously used to encourage users to migrate to its own platform.
