Braintrust Urges API Key Rotation After AWS Account Compromise
Summary
Braintrust said hackers accessed an internal AWS account that may have exposed customer AI-provider API keys. At least one customer was affected, and three others reported suspicious usage spikes; the investigation is ongoing.
Key points
- Braintrust said it discovered unauthorized access to an internal AWS account on May 4 and notified customers the next day.
- The account likely gave attackers access to organization-level API keys used to access AI models.
- Braintrust said at least one customer was affected; three others reported suspicious spikes in AI-provider usage.
- The company locked down the account, audited and restricted related systems, rotated internal secrets, and began an investigation.
- Braintrust recommended that customers revoke and replace stored AI-provider keys, then verify rotation by checking key timestamps.
- The company said it had not identified broader customer exposure and that its investigation was ongoing.
Article Details
- Victim Organization
- Braintrust
- Incident Type
- Unauthorized access to an internal AWS account, potentially exposing customers' AI provider API keys.
- Data Types Exposed
- AI provider API keys and secrets, potentially
- Operational Impact
- Braintrust reported at least one affected customer. Three other customers reported suspicious spikes in AI provider usage. Braintrust said it had not identified broader customer exposure as of its investigation to date.
- Claim Status
- confirmed