Stolen AI keys drain quotas: 9 dev platforms breached in October
Wiz's 'Black October' report ties nine breaches — Railway, Warp, Lightning AI, Northflank — to env-var key theft; two cases burned ~$100K. Rotate now.
Copy markdown
Northflank is the latest — assume every env var is gone
Northflank disclosed an Oct 30 breach and told customers to treat all environment variables as decrypted; users soon reported their AI API keys being used to run models. The root cause still isn't public. If you deploy there, rotate everything and pull the audit logs it just switched on for every account, free tier included.
It's a pattern, not one vendor
Wiz's 'Black October' report counts at least nine AI dev-platform breaches last month — Railway, OpenCode, Warp and Lightning AI among the named five — tied together by no single CVE. The common thread is the target: attackers go straight for stored environment variables, and AI provider keys most of all.
LLM-jacking turns your key into their compute
In two cases Wiz investigated, stolen enterprise credentials drove about 2.5M Amazon Bedrock calls and roughly $100K of usage before anyone noticed — the bill is usually the first signal. Attackers either resell the stolen access or burn it running their own models on your tab.
What to do before the invoice does
Rotate AI and payment keys first, then database and cloud creds. Issue per-project keys scoped to the models and regions you actually use, set hard spend limits, and check each provider's usage for the days around the incident. Wiz flagged attacker IPs including 23.106.46.239 and 31.57.201.201 — grep your logs for them.