GitBook Tells Customers to Replace Credentials After Security Breach

GitBook urged customers to rotate API tokens and integration secrets after it found an attacker had accessed infrastructure credentials, with customer data potentially exposed. GitBook described the intruder as using AI agents and said the incident began at 1 p.m. ET (18:00 UTC) Nov. 2. The company temporarily took its app and authenticated documentation sites offline while securing its infrastructure. Public pages remained available from cached data as long as possible. Information that may have been accessed included integration tokens, Git Sync secrets, API tokens and questions visitors sent to GitBook Assistant.

Source: TokenPost