Breaches and incidentsBriefReported by a reputable outlet, citing the company
Braintrust: AWS account holding customers’ AI provider API keys accessed; every customer told to rotate
Braintrust, an AI evaluation and observability platform, confirmed unauthorized access to one of its AWS accounts that held org-level AI provider API keys...
- Disclosed
What happened
- Braintrust, an AI evaluation and observability platform, confirmed unauthorized access to one of its AWS accounts that held org-level AI provider API keys customers store with it. It said it had communicated with one impacted customer and “to date have not found evidence of broader exposure”, while asking every customer to rotate stored keys. SecurityWeek reported three more customers saw unexpected AI API usage spikes (single outlet).
- Root cause: under investigation at time of reporting.
- No attacker named.
- Account locked down, access restricted, internal secrets rotated.
Sources
- https://techcrunch.com/2026/05/06/ai-evaluation-startup-braintrust-confirms-breach-tells-every-customer-to-rotate-sensitive-keys/
- https://www.securityweek.com/ai-firm-braintrust-prompts-api-key-rotation-after-data-breach/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.