GitBook confirms breach via AI agents
Original title: Gitbook Breached
Attacker accessed Git Sync secrets, API tokens, and visitor questions using AI agents; all tokens invalidated and services restored.
GitBook experienced a targeted attack on November 2 that granted unauthorized access to infrastructure credentials. The company detected the incident immediately, blocked the attacker, took services offline, and invalidated every customer API token. Public content was kept live via cache with no evidence of content modification. Third-party tokens and Git Sync secrets may have been accessed. The company is monitoring for further attacks and will publish a post-mortem.
Unconfirmed: Exact scope of data exfiltrated and any customer impact; post-mortem details pending
- Attacker used AI agents
- All API tokens revoked
- No GitBook content modified
- Services restored after mitigation
Impact: Access to Git Sync secrets, API tokens, and visitor questions
| Product | Affected |
|---|---|
| GitBook | — |
| GitBook | — |
- 1.Rotate API tokens
- 2.Rotate third-party API tokens
- 3.Re-authenticate GitBook MCP server
From the original article
2 min read at news.ycombinator.com[](https://news. ycombinator. com/)Hacker Newsnew past comments ask show jobs submitlogin [](https://news.
By punchmesan · news.ycombinator.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.