Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Northflank
cloud PaaS / developer infrastructure · United Kingdom provider; customers include U.S. (none named)
What happened
Secrets in Northflank's shared control plane; customers told to assume every environment variable was decrypted. Northflank says workloads and workload data were not accessed and dedicated control planes are unaffected.
Multiple customers confirmed unauthorized use of AI provider keys stored on the platform (30 Oct 15:12Z and 23:38Z). All customers must rotate AI, cloud, payment and database credentials; seven components listed in major outage.
Confirmed affected parties
- Multiple unnamed Northflank customers with AI keys used without authorization (provider relays customer reports)
What remains unknown
- Root cause and the product behind CVE-2026-98432
- Customer count
- Size and provider of AI key abuse
- Component recovery time
Losses: unknown; no amount published
Capital around this company
DFX holds no verified lender or owner record for this organization yet. That is a gap in our coverage, not evidence that none exists.
Sources
- Northflank status page: Security incident · 2026-11-02T11:09Z (newest update)
- Wiz: Black October for AI Developer Platforms · 2026-10-30
- Qovery (competitor) blog: Northflank security incident (search snippet) · 2026-10 (approx.)
- Web search: CVE-2026-98432 Northflank (no record found) · n/a
Does Northflank touch your portfolio?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.