Northflank confirms breach; AI API keys stolen amid wave of PaaS attacks
The deployment platform joins Railway, Zeabur, and others in a month-long security crisis targeting multi-tenant infrastructure.
What to know
- Northflank customers' AI API keys and environment variables were compromised; the company advised immediate rotation of all secrets and credentials.
- The breach is the sixth major attack on Platform-as-a-Service vendors in one month (Railway, Zeabur, OpenCode Console, Fireworks AI, PingCAP/TiDB, Northflank), suggesting a coordinated or AI-assisted attack wave.
- The incident is driving debate over whether to migrate back to hyperscalers for security, adopt bring-your-own-cloud models, or return to self-hosted infrastructure.
- Questions persist about whether modern PaaS vendors can adequately protect multi-tenant environments and whether AI-assisted cyberattacks have fundamentally changed the security landscape.
The dispute Whether the wave of breaches represents a temporary correction that will harden the sector, or a fundamental vulnerability in the PaaS model that will force long-term consolidation or decentralization. · positions read across 37 posts and comments
PaaS sector will consolidate back to hyperscalers due to superior security posture and resources.
-
“Unfortunately for infra startups, I think we're going to see a convergence back to hyperscalers as a result of incidents like this and railway.”
dangoodmanUT · Hacker News ↗
Companies will shift to self-hosting and open-source deployment tools to reduce attack surface and payoff to attackers.
-
“I actually think it's the opposite. I think people will move back to their own hardware with OSS deployment like dokku. If everything is more bespoke the attack surface is smaller as is the pay off.”
digitaltrees · Hacker News ↗
AI-assisted attacks are fundamentally changing security; technical defenses alone may become impossible.
-
“This could all go multiple ways but one of them is we end up in a place where technical security is just not possible to implement any more.”
zmmmmm · Hacker News ↗
This is a correction phase; vendors will harden or fail, and security will improve within a year.
-
“Lots of panic around these incidents. This is a healing process. Companies who sacrificed on security for a long time are incurring the consequences, they'll adjust their posture or go out of business.”
lifeisloving · Hacker News ↗
Northflank Compromised deployment platform
How it unfolded 3 developments, newest first · click a bar or a number to jump postscomments
-
3
Northflank's prior criticism of Railway's breach now highlights own vulnerability
A commenter noted that nine days before its own breach disclosure, Northflank had published a blog post encouraging customers to migrate from Railway following that platform's compromise—an ironic turn given Northflank's subsequent disclosure of the same type of attack.
“Lots of panic around these incidents. This is a healing process. Companies who sacrificed on security for a long time are incurring the consequences.”
— lifeisloving, Hacker News commenter · source -
Lots of panic around these incidents. This is a healing process. Companies who sacraficed on security for a long time are incurring the consequences, they'll adjust their posture or go out of business. In a year I think platforms will be a lot more hardened. Its not because AI is unstoppable, its just revealing holes and the importance of hiring…
2 more of the top 3 · 5 posts in this stretch
-
9 days ago, Northflank was having fun with Railway getting breached and urged their customers to migrate to them instead.
-
My first question with BYOC would be: if the vendor gets hacked, what can the attacker do in my account? Read secrets? Push a new image? Run commands? Having the servers in my account sounds nice, but if they vendor still has the keys to everything, how much does that actually buy me?
-
-
2
Researchers flag broader pattern of six major PaaS breaches in one month
A Hacker News commenter documented a spike in attacks against multi-tenant SaaS vendors, identifying six substantial breaches since early September: PingCAP/TiDB, Fireworks AI, Zeabur, OpenCode Console, Railway, and now Northflank, characterising the situation as a full infosec emergency.
“I count at least six substantial, lightning-speed attacks against multi-tenant as-a-service vendors since September. Not this year--just since last month.”
— jonathaneunice -
IMO, There is no "middle-ground" to the situation.I wanted to write a blog post about it as I was thinking the same but I guess a comment will help me get my thoughts across just as much.Either we are gonna see a convergence to hyperscalers as you mention, or we would go back to completely indie companies which compete on perf/price.There could…
2 more of the top 3 · 27 posts in this stretch
-
This could all go multiple ways but one of them is we end up in a place where technical security is just not possible to implement any more. What does that world look like?Presumably it means much more behavioral security and inherent friction built in to everything we do. Maybe high value transactions will just inherently have to take multiple…
-
I hope this is a real wake-up call for teams running anything remotely SaaS-shaped. I count at least six substantial, lightning-speed attacks against multi-tenant as-a-service vendors since September. Not this year--just since last month. PingCAP/TiDB, Fireworks AI, Zeabur, OpenCode Console, Railway, now Northflank. All of them modern "we keep…
-
-
1
Northflank discloses breach affecting AI API keys and environment variables
Northflank posted a status update confirming that users reported unauthorised use of AI API keys supplied to the platform. The company advised all customers to assume all environment variables have been compromised and to immediately rotate secrets, revoke credentials with providers, and review usage logs for suspicious activity.
“All users should assume their environment variables are decrypted and begin rotation immediately.”
— Northflank -
Unfortunately for infra startups, I think we're going to see a convergence back to hyperscalers as a result of incidents like this and railway.There's no amount of "nicer to use" that can replace security, at least certainly when selling to enterprises
2 more of the top 3 · 5 posts in this stretch
-
How these Paas (Railway before) are being breached? Poor choices or something else? Scary Nonetheless. I thought AI advancement will make the self hosting painful. If PaaS are no good, then what can be done?
-
Are hyperscalers actually more secure though? I have only heard anecdotal thinking eg nobody ever got fired for choosing IBM.
-
What people are saying 16 voices from 1 site · best of 37 · verbatim
- How much more secure are hyperscalers genuinely, and do they publish breach rates to back that claim?
- If a vendor uses bring-your-own-cloud (BYOC), but still holds deployment keys, how much protection does BYOC actually provide?
- Are these breaches driven by AI-assisted attacks, and if so, how do defenders scale response faster than attackers can evolve?
- Oct 31
-
It might be probable that the endgame for NK employees getting remote tech jobs was not for money but for state level IT infrastructure terror events. (and probably many other countries)
- Oct 30
-
> probably pretty good protectionsIn my career I've seen maybe two companies have pretty good protections. Both had government contracts so they had no choice. Otherwise there's no reason for companies to secure their stack. They make money easier without it.The buildings are on fire because they're being built out of straw because it's cheaper…
-
Maybe Bill Gates has a point when he says that models capable of significant cyberattacks need to run on controlled infrastructure. Is the era of open weight models you can strip safeguards from turning out to be so great? From my perspective, this kind of sucks.
-
I wonder which one of these are at least partially due to effortless vibecoding...Also, if vulnerabilities are so easy to find, it should also be easy to detect them through a simple red team exercise.
-
i wonder if there is a chain reaction point, when one compromised vendor holds secrets to another one and that becomes the next target. Northflank lists Sentry as their customer. So if Northflank secrets are decrypted and Sentry used them for deployment, you have a starting point to attack Sentry next which then opens up a lot more.
-
A trick i've started doing is encrypting my env vars, then hard-code the decryption key in the codethat way if the provider gets popped, they need my binary to decrypt itit shouldn't be necessary and it sounds stupid, but in cases like this, it proves invaluable (it appears they don't have customer code/binary access, but maybe that wasn't…
-
War ?Last I checked major companies are still outsourcing essential engineering to save a buck.A bit old, but how was this practice ever acceptable.https://www.propublica.org/article/defense-department-pentag...A multi trillion dollar company( Microsoft) too cheap to hire onshore for DoD contracts.
-
We're observing a worrisome speed up in security breaches. To me it's clear that weaponized AI will cause more harm than some productivity benefits.It’s the death of homegrown software.
-
Unfortunately, this is going to be an everyday story. More and more bugs and breaches will be discovered and this move fast world more and more will be continued to be made.Security is a perception, but right now it seems like it needs good PR.
-
I'm curious what people think of BYOC (bring your own cloud) as an option offering to customers or buying it as a customer. Looking at Northflanks website they list it as an offering, I presume those customers are not affected by the breach.What are your opinion on the concept? Growing trend that should be encouraged or a mistake for most…
-
So if you want to judge as a customer for selection and figure out how likely a new(ish) PaaS company going to get breached, how would you evaluate them?1. Ask them about what percentage of their own resources goes towards cybersecurity, audits etc. Would they even tell you.2. Technical stack maturity. If the details are available, because they…
-
The things that Northflank and Railway were apparently breached to steal aren't just things that hyperscalers would have protected worse instead of better; they're AI API keys, things that only existed because people were using hyperscalers instead of running inference on their own hardware (or on Amazon AWS EC2 GPU instances).
-
I actually think it’s the opposite. I think people will move back to their own hardware with OSS deployment like dokku. If everything is more bespoke the attack surface is smaller as is the pay off. Hacking railway got access to lots of api keys, hacking some random vps gets less payoff.
-
Run agents and everything they build. Secure execution from the first sandbox Getting hacked while in the business of selling a secure sandbox isn't really a good look. It seems like can't even trust anything these days. The other day OpenCode got hacked and leaked everyone's secrets inside .env to attackers and now this. Sigh.
-
I feel like these breaches started to accelerate after Anthropic wrote a full post about how easy it is to abliterate glm 5.3 to make a frontier-level cyber model.Now, to be clear, abliteration was no state secret, but that blog post was pure accelerationism.
-
> There's no amount of "nicer to use" that can replace security, at least certainly when selling to enterprisesAzure would beg to differ.