Identified

Last updated: October 31, 2026 at 11:31 PM UTC

Security incident affecting Northflank environment variables

Affected Components

Environment variablesGlobal secretsMinio AddonsMySQLNorthflank environment variablesNorthflank platformRabbitMQ add-onsRedisSecret groupsSecrets on workloadsaddonsglobal secretssecret groups

Updates

Identified

October 31, 2026 at 11:31 PM UTC

Northflank has made secret rotation for RabbitMQ add-ons available to all customers amid its security incident.

Identified

October 31, 2026 at 10:32 PM UTC

Northflank has made secret rotation for Minio Addons available to all customers amid its security incident.

Identified

October 31, 2026 at 01:34 PM UTC

Northflank has made secret rotation for MySQL and Redis available to all customers amid its security incident.

Identified

October 31, 2026 at 01:04 AM UTC

Northflank has enabled audit logs for all customers, including free users, as its security incident investigation continues.

Identified

October 30, 2026 at 11:38 PM UTC

Northflank's investigation continues with no new findings; guidance remains to assume all environment variables compromised and rotate all secrets immediately.

Identified

October 30, 2026 at 07:29 PM UTC

Northflank's investigation continues with no new findings; guidance remains to assume all environment variables compromised and rotate all secrets immediately.

Identified

October 30, 2026 at 03:12 PM UTC

Northflank has identified the security incident and advises assuming all environment variables were decrypted, so keys must be disabled or rotated.

Identified

October 30, 2026 at 01:58 PM UTC

Northflank has identified the security incident and advises assuming all environment variables were decrypted, so keys must be disabled or rotated.

Investigating

October 30, 2026 at 01:40 PM UTC

Northflank is investigating a security incident and advises rotating environment variables immediately while patching continues.