Breachesby GlyphBraintrust
Disclosed May 4, 2026Confirmed
AI evaluation startup's AWS account breach exposed stored customer AI API keys
Braintrust confirmed unauthorized access to one of its AWS accounts that held API keys customers use to reach cloud AI models, and told every customer to rotate stored keys. It said one customer was known to be affected.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | May 4, 2026 |
| Attack | Hacking |
| Data exposed | API keys |
| Sector | AI · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
2026-05-05 to 2026-05-04by seedSource
AI evaluation platform Braintrust said an unauthorized party accessed an AWS account storing customers' API keys for cloud AI models, with one customer confirmed impacted. It rotated internal secrets and told every customer to rotate keys. to Braintrust confirmed unauthorized access to one of its AWS accounts that held API keys customers use to reach cloud AI models, and told every customer to rotate stored keys. It said one customer was known to be affected.by seedSource
AI eval startup Braintrust tells all customers to rotate AI API keys after AWS breach to AI evaluation startup's AWS account breach exposed stored customer AI API keysby seedSource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.