Home / Incidents / Data breach
Apify rotates API tokens and forces 2FA resets after breach
An intruder reached parts of the web-scraping platform's internal systems on 9–10 November; Apify rotated customer API tokens and proxy passwords, revoked OAuth links such as GitHub and says 2FA codes may have been exposed.
- Organisation
- Apify
- Disclosed
- 12 November 2026
- Affected
- Not stated
- Data
- API tokens, proxy passwords, OAuth connections, possibly 2FA codes
- Attacker
- Unknown
- Severity
- major
- Region
- Global
- Source
- BleepingComputer ↗
Cite this
Nuffield Consulting, “Apify rotates API tokens and forces 2FA resets after breach”, The Daily Tech Wire outage & breach log, 12 Nov 2026. https://techwire.nuffieldconsulting.com/incidents/2026-11-12-apify-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: BleepingComputer, https://www.bleepingcomputer.com/news/security/apify-rotates-api-tokens-prompts-2fa-resets-after-breach/.
Related incidents
- 11 Nov 2026Baltic SMS provider left 125M messages exposedCSCTelecom · breach · Unknown · 125M records
- 9 Nov 2026Nitori warns 37.62m customer records may have leakedNitori · breach · Unknown · 37.6M records
- 9 Nov 2026Frontline Education breach total rises to over 3 millionFrontline Education · breach · Unknown · 3.1M records
- 7 Nov 2026Crédit Mutuel Arkéa hit via a service providerCrédit Mutuel Arkéa · breach · Unknown
- 6 Nov 2026Chainalysis says credentials and live tokens for all customers were exposedChainalysis · breach · Unknown