Northflank - Security incident – Incident details

Secret rotation on Postgres and MongoDB has been enabled for all users. We recommend disabling public expose on addons if you have enabled that.

All users should assume their environment variables are decrypted and begin rotation immediately.

Secrets on workloads

Secret groups

Global secrets

Multiple users are confirming that their AI keys have been used.

Assume all environment variables have been decrypted. Disable/rotate all keys.