Overview of the Incident
Apify, a web scraping and browser automation platform, has responded to a breach by taking immediate action to secure its systems. The incident occurred between November 9 and 10, and the company detected the breach the next day at 12:13 UTC. The company's response included invalidating internal credentials, rotating API tokens, and resetting all active sessions.
Company Response
Apify's response to the breach involved several critical steps:
- Invalidating Internal Credentials: The company cut off the attacker's access by invalidating internal credentials. This step is crucial to prevent unauthorized access to the system.
- Rotating API Tokens: To further secure the system, Apify rotated API tokens. This action ensures that any compromised tokens are no longer usable, reducing the risk of unauthorized access.
- Prompting 2FA Resets: To enhance security, Apify prompted affected users to reset their two-factor authentication (2FA) codes. This step is essential to protect user accounts from potential unauthorized access.
Impact and Mitigation
Apify's response aims to mitigate the impact of the breach. The company has revoked OAuth connections to external integrations, including GitHub, to ensure that any compromised credentials are not used for unauthorized access. Additionally, impacted users will be informed via email when it is safe to reconnect.
Company Background
Apify is a Czech web scraping and browser automation platform for developers. The company has grown significantly with the rise of generative AI, and it currently has 80,000 customers, including Microsoft, Samsung, T-Mobile, Accenture, Siemens, the European Commission, and Roche.
Customer Impact
Impacted customers will receive notifications advising them to reset their 2FA through the Apify Console. The company assures customers that their passwords remain safe and that account data stored on its platform has not been affected by the incident.
Conclusion
Apify's swift response to the breach underscores the importance of proactive security measures. By invalidating internal credentials, rotating API tokens, and prompting 2FA resets, the company has taken steps to secure its systems and protect its customers' data. The company's transparent communication and swift action demonstrate its commitment to maintaining the security and integrity of its platform.
Comments