Wiz Says at Least Nine AI Developer Platforms Were Hit in October and Stolen Keys Went to Work
Wiz says at least nine AI developer platforms disclosed incidents in October, and two stolen enterprise keys likely ran up more than $100,000 in Amazon Bedrock usage. Northflank now tells customers to assume every stored secret was stolen.
Attackers have worked out where developers park their most valuable AI secrets, and they are emptying the vaults one platform at a time. Security firm Wiz says at least nine AI developer platforms disclosed incidents between Oct 6 and Oct 30, and the latest, Northflank, is now telling customers to assume every secret it stored was stolen.
Wiz laid out the run in an Oct 30 report by Benjamin Read and Rami McCarthy. It starts with Fireworks AI on Oct 6 and runs through Zeabur, Lightning AI, OpenCode, Railway, Warp and CommandCode before ending with Northflank. Fireworks, OpenCode and Warp reported signs of an agent swarm attack. Warp, which we covered in an earlier report, is just one entry on the list now.
"Any other month, and this would be the top security story." Wiz researchers Benjamin Read and Rami McCarthy
Wiz is careful here, and so should we be. It says no single vulnerability or dependency links the incidents, and it has not confirmed one actor. Reported root causes differ, from credential access to a legacy system. What the cases share is the target. Wiz says every public report describes attackers hunting stored environment variables, especially the ones that unlock AI services.
The money trail is where it gets ugly. Wiz says public reports of damage are still anecdotal, including about $371,000 in crypto allegedly stolen using keys held on Railway and consumer AI bills in the hundreds to thousands of dollars from stolen OpenCode access. But Wiz also traced two stolen enterprise keys to heavy Amazon Bedrock abuse. The first test call came from a residential IP address within 30 minutes of the reported credential access at the vendor. One key then made about 800,000 Bedrock calls over 30 hours, with Opus models making up three quarters of the successful ones. The other made about 1.7 million calls in 13 hours. At list price, Wiz says, those two cases alone likely ran up more than $100,000.
Wiz also found the keys were passing through reseller hands. It says it found infrastructure tied to LLM resale sites that tested the stolen credentials, though it cannot tie those operators to the original breaches or to the flood of calls. One IP address Wiz links to a resale operation was also named publicly by Zeabur as part of its own compromise. Wiz reads the multiple actors touching the same keys as a sign of a robust market.
Northflank tells customers to assume the worst
Northflank is the freshest case and the bluntest. After a threat alert from Wiz on Oct 30, the company posted a status page notice with a line no platform wants to write.
"Assume all environment variables have been decrypted. Disable/rotate all keys." Northflank, status page update, Oct 30
Later updates said users had reported unauthorised use of AI API keys supplied to the platform, and pointed customers to their AI provider usage and billing logs. According to BleepingComputer, it has not said how attackers got in or how many customers were affected, and had not responded to its questions at publication.
Zeabur offers the other cautionary tale, and it is a painful one. Its own preliminary report says an attacker used leaked internal credentials on Oct 14 and 15 and read environment variables stored in its platform database, covering 3,218,965 records across 321,810 accounts. Zeabur says the root cause lies with the company, because long-lived admin credentials were stored in plaintext. It also says the attacker tried to call Amazon Bedrock with its own AWS keys, and that every attempt failed with no charges. Zeabur announced on Oct 17 that it will wind down, with all services stopping by Dec 31. Wiz says the shutdown is due to the incident. Zeabur itself calls it an operational decision.
The takeaway is unglamorous. A secret stored in a vendor dashboard is a secret the vendor can lose, and Wiz says the first test call on stolen keys came within 30 minutes of the reported credential access. Rotating keys after a breach notice is no longer housekeeping.
