Osegi
Security·1 min read

GitBook Breach: AI-Assisted Attack Exposes Infrastructure Keys

GitBook says attackers used AI assistance to reach infrastructure credentials, prompting a shutdown and emergency token resets for users of the documentation platform.

A padlock over lines of code on a dark screen, symbolizing a security breach at a documentation platform.
Image: Decrypt

GitBook, the documentation platform widely used by crypto projects, says attackers gained access to infrastructure credentials in a breach that involved an AI agent. The company responded by shutting down parts of its service and forcing emergency token resets.

Users are being urged to rotate their keys. Because GitBook hosts documentation for many blockchain and crypto teams, credentials connected to the platform are a sensitive target, and any secrets that were stored or shared through it should now be treated as potentially exposed.

What is known

According to the company, the intruders reached infrastructure credentials, which prompted the shutdown and the reset of access tokens. Further details, such as how the attackers got in, how long they had access, and how many customers are affected, were not available at the time of writing.

What users should do

Teams that use GitBook should rotate any API keys, access tokens and integration credentials tied to their accounts, and review whether any secrets were ever placed in documentation pages or connected repositories. Checking access logs for unusual activity is a sensible further step.

The incident adds to growing concern about attacks in which AI agents help automate reconnaissance and credential theft. For the crypto sector, where leaked keys can lead directly to lost funds, even a breach limited to infrastructure credentials can have wide consequences.

GitBook is expected to provide more information as its investigation continues.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:gitbooksecurity breachai agentcryptoapi keys

More from this day

See all →

More in: Security

See all →