tl;dr: Northflank suffered a security breach in which attackers decrypted customer environment variables, with multiple users confirming unauthorized use of their AI API keys. The company is urging all users to immediately rotate secrets (workload, group, and global), disable public access on addons, and revoke/replace credentials with upstream providers. The incident appears linked to the broader "Black October" campaign targeting AI credentials documented by Wiz, and Northflank has since enabled audit logs for all customers, including free users.