October 2026 Security Incident
On October 15, 11:00 PM UTC we identified a security incident on the Lightning Platform involving unauthorized access to credentials. We revoked all user access to the Lightning Platform on October 16 at 1:00 AM UTC to address the issue.
The incident involves the Lightning Studio Platform services like Studio, Deployments, Pipelines, and Drive and not the GPU cluster rental infrastructure or managed services like Kubernetes and SLURM.
We believe that certain customer credentials were compromised to gain access to environments and connected third-party services. We have revoked all identified credentials used in the incident and continue to investigate and monitor the environment.
This is an active investigation and during this time the Platform will remain inaccessible to all users as our teams focus on addressing the event. We are actively working to restore access to the service.
We are working with an independent external cybersecurity firm to further assist with the ongoing investigation.
We recognize the concern and disruption this creates for our affected customers. Customers identified as potentially affected to date have been notified and provided account-specific information to assist with response efforts.
Out of an abundance of caution, we recommend all users complete the following actions regardless of whether we contacted you about this event:
- Rotate secrets, API keys, and revoke credentials stored in your AI Studios environment such as Github credentials.
- Update credentials used for third-party services accessed by your virtual machines.
- We have revoked identified keys associated with your cloud accounts used on the Lightning Platform. Please review your third-party systems and access logs for unauthorized access during this window.
If you have not received a notification, your environment has not been identified as affected based on our investigation to date. If you have questions or observe suspicious activity please contact us at [email protected].