Apify breach forces credential changes and some two-factor resets
Text
The automation platform says stolen credentials were used to reach customer accounts.
Apify says stolen credentials were used to reach customer accounts. The automation platform has closed that access path.
It rotated internal secrets and revoked some integrations as a precaution, without finding those connections were an attack route.
BleepingComputer reviewed notices describing replaced API tokens and proxy passwords. Another notice requested two-factor authentication resets.
Such changes can disrupt unattended workflows. Apify is notifying affected users and guiding private GitHub repository users through reconnection.
Source date: November 12, 2026.
Share this article
What do you think of this story?
Anonymous feedback, up to 5 reactions per article.
Anonymous comments
Share your thoughts without signing in.
Discuss the technology and the story. Hate, politics and war, threats, abuse, personal accusations, sexual content, ads, links and personal information are not allowed.
No comments yet. Be the first to share.