AI agents breached GitBook and may have stolen customer API tokens
Gitbook Breached
GitBook says a sophisticated, highly targeted attack carried out with AI agents let an intruder grab infrastructure credentials on November 2. The company took the app and authenticated docs offline, rotated every secret, and revoked all personal API tokens. Attackers may have accessed Git Sync secrets, GitBook and third-party API tokens, and visitor questions to GitBook Assistant, though no evidence shows content was altered. Customers are told to rotate tokens and re-authenticate the MCP server.
GitBook has been the target of a sophisticated, highly targeted attack using AI agents.
- SamyPesse
GitBook’s CTO here
We have been dealing with a security attack since yesterday. Our team has been all hands on deck since the start, and we took a large portion of our services offline to prioritize user security.
Our service is progressively coming back online (most of it already is), and we are actively monitoring the situation.
We’ll continue to actively keep our users updated through emails, Slack, and our status page as we monitor the situation and learn more.
- FastDeep
Good that they rotated all the tokens themselves instead of just telling users to do it, seen too many incidents where that step gets skipped.
- petecooper
- aliasxneo
"GitBook has been the target of a sophisticated, highly targeted attack using AI agents."
Add it to the list, I guess.
- manytimesaway
FYI, Gitbook was made by the team behing friendco.de, which they killed without any announcement years ago.