Terrateam and Stategraph were not impacted by the Northflank security incident
On October 30, Northflank reported a security incident. Terrateam and Stategraph run on Northflank. We rotated every secret we keep in Northflank shortly after we received notice from Northflank. We were not impacted, and you do not need to do anything.
What happened
On October 30, Northflank reported a security incident. Terrateam and Stategraph run on Northflank. Northflank told its customers to assume that every environment variable on the platform had been decrypted, and to rotate all secrets.
Later that day Northflank said that some of its users had seen their AI API keys used by someone else. Northflank's incident page is at status.northflank.com.
What we did
We were not impacted.
We rotated every secret we keep in Northflank shortly after we received notice from Northflank. Our databases on Northflank are not reachable from the internet.
We found no sign that anyone used our secrets or accessed your data. We reviewed our logs and our database. There were no requests from the IP addresses in Wiz's report on these attacks, and no logins or API keys we could not account for.
What you need to do
Nothing
You do not need to do anything.
- If you use Terrateam or Stategraph in our cloud, there is nothing to do.
- If you run Terrateam or Stategraph self-hosted, it runs on your own infrastructure and your secrets were never in Northflank. There is nothing to do.
Timeline
All times are UTC. The Northflank entries are from Northflank's incident page. Ours are from Northflank's email to us and our deploy logs.
Questions
If you have questions, email security@terrateam.io.