Apify breach exposes risks beyond API token resets | Magica
Apify confirms customer data access after internal breach
Editorial Team
••📖6 min read
Apify says an intruder accessed customer accounts and personal information or stored data. Customer notices describe credential rotations and two-factor resets, while the affected-account count and full data exposure remain unclear.
Apify says it has notified customers whose personal information or stored data was accessed.
Customer notices describe API-token and proxy-password rotations, with some users also told to reset two-factor authentication.
The affected-account count and the full scope of stored-data access remain unresolved.
Apify, a Czech web-scraping and browser-automation platform for developers and businesses, says it has notified customers whose personal information or stored data was accessed in a breach. The November 12 disclosure confirms customer impact after an intruder used a compromised credential to obtain access to Apify accounts.
Company-reported chronology of unauthorized access, detection and confirmation of customer-data access. Source: Apify; graphic: Magica. Source: Apify — Security incident.
From internal access to customer accounts
An unauthorized third party entered parts of Apify’s internal systems on November 9 and 10, 2026. Apify says it detected the activity on November 11 at 12:13 UTC, cut off access and began investigating. In its November 12 incident updates, the company explained that a compromised credential had enabled the intruder to obtain account credentials and access the related Apify accounts.
For customers, recovery involves both replacing credentials in automated workflows and understanding what information was exposed. The public updates do not specify how many accounts were affected or which kinds of stored data the intruder reached.
Apify says the access path is closed and it has detected no further attacker activity since November 11. It has rotated critical internal secrets, added monitoring and notified the relevant authorities. Those are company statements about containment; the investigation remains open.
The platform is also a marketplace for tools focused on scraping and web crawling. A November 12 report put its customer base at 80,000, citing Apify. That company-reported scale is not a count of victims. The number of affected accounts has not been disclosed, as a separate report on the intrusion noted.
Treasury Secretary Scott Bessent said agencies had backed export restrictions on Nvidia customer Megaspeed for months. He challenged Commerce’s handling of the case and Nvidia’s safeguards, while Megaspeed denies illicit chip exports to China.
Photo, email address, name, username and social-media profiles
Usage
Plan, billing history, internal usage metrics, browser and device details, and recent login IP addresses
Billing
Name, address, tax ID, billing email, and cardholder details including the last four card digits and expiry date
Authentication
Two-factor settings, recovery codes and phone numbers, Google and GitHub login tokens, and password hashes
According to that account of the email, Apify said full card numbers and security codes were not exposed, and passwords were stored as salted hashes rather than readable text. It also said secret environment variables and secret Actor inputs could not be read. Actors are the programs customers use for scraping and automation.
Apify warned customers about convincing phishing emails, according to the same account of its notification. Names, billing details and partial card information could help an impersonator make a fraudulent message look credible. Recovery codes matter separately: they can substitute for an authenticator-app code, making their possible exposure a reason to renew two-factor authentication.
The notifications were not identical. Apify also reset active sessions, according to a report on its response. That report reviewing customer notices described one email saying there was no indication that stored account data had been affected, alongside notice of rotated Apify API tokens and Proxy passwords. A different letter told recipients to reset two-factor authentication because their codes might have been exposed, while saying their passwords remained safe.
The later public update, posted November 12 at 17:16 CET, explicitly said Apify had notified customers whose personal information or stored data was accessed. The available evidence does not establish whether differing notices reflect different customer exposure, developing findings, or both. The customer-email report’s lack of evidence for access to Actors, runs or datasets should therefore not be read as a final finding that all stored data was untouched.
Restoring workflows also means reviewing permissions
Apify revoked some OAuth connections to outside services, including the code-hosting service GitHub, as a precaution. These connections authorize integrations between services. The company said its investigation had not found that those connections could be used as an attack vector. Revocation is not evidence that the intruder used them.
For customers building Actors from private GitHub repositories, Apify instructs users to reconnect through an Actor’s “Change provider” setting and authorize GitHub once per account and organization. Other integrations should be reconnected when prompted. Rotated API credentials also have to be replaced in dependent workflows; that creates recovery work beyond signing back into a dashboard.
Customers also have an existing way to limit the access granted to individual integrations. In its scoped API token announcement, Apify explained that its historical tokens had granted full account access. Scoped permissions could restrict a token to particular resources, such as reading a specific dataset or writing to a single key-value store.
Those controls limit a token’s permissions. They do not establish that scoped tokens would have prevented this intrusion: the disclosed entry point was a compromised credential to internal systems, and Apify has not detailed how that led to customer credentials. The open control question is what separated those internal permissions from customer accounts.
Apify’s 2024 scoped-token announcement shows read and write permissions assigned to a specific dataset. Source: Apify — Scoped API tokens.
What the postmortem needs to establish
Apify has a relevant earlier incident to compare against. In its account of a March 6, 2026 breach, it said an employee’s compromised GitHub account was used to inject malicious code into repository branches. Branch protection prevented those changes from reaching default or protected branches, and the company found no evidence that customer data had been accessed. That was a different disclosed attack path, not evidence of a common attacker or a continuing compromise.
This time, Apify has acknowledged access to customer accounts and data. Its promised postmortem needs to explain whose credential was compromised, how the attacker obtained it, what allowed access to customer credentials, and which stored resources were reached. A count of affected customers would also distinguish the breach’s measured scope from the platform’s overall size.
For now, Apify tells recipients to follow their individual notification instructions. Customers who have not received an email have not been identified as affected “so far,” the company says, and it will contact additional customers if that changes. That qualification leaves the boundary of the incident open even after the reported access path has been closed.
Applied Materials expects chipmaking equipment demand to rise more than 30% in 2027, while supplier capacity and factory readiness will determine how much demand becomes sales.
Shi Bingzhe and two companies face money laundering charges over 917 servers allegedly acquired from Aperia International. The case now covers five individuals and six companies, but the new charges do not establish the servers’ chip contents or ultimate destination.
Nothing’s December AI device has appeared with red and green lights and an apparent recording button. The clues suggest an audio tool, but existing AI recorders leave the company needing to explain its hardware, service costs and use of personal context.
Chinese computing projects still specify Nvidia processors, but their reported values mix proposals and contracts. Conditional US licenses, Chinese restrictions, financing and customer demand complicate the path to usable capacity.
The former Huawei server business has passed Shenzhen's listing committee review for an 8 billion yuan IPO. Its growing market share and profits sit alongside negative operating cash flow and a sharp increase in short-term borrowing.
EU leaders gather for their first dedicated AI discussion, weighing investment, foreign dependencies and safety while Ukraine diplomacy competes for attention. The informal summit is a strategic discussion, with no political statement scheduled for adoption.
New hardware orders have increased Nscale's 2027 funding needs and limited its ability to defer spending. The British AI infrastructure provider is pursuing a New York listing targeting a $35 billion valuation while financing for its Anthropic contracts remains uncommitted.
Commerce Secretary Howard Lutnick has agreed to voluntary Senate testimony as bipartisan scrutiny of Nvidia exports turns to government approvals and enforcement. A hearing date remains unconfirmed, and intelligence suspicions remain disputed.
The startup founded by Microsoft data-system veterans has raised $70 million across seed and Series A rounds. Its unified analytics platform targets unpredictable AI-agent workloads, but the claimed savings still need comparable performance evidence.
Samsung Electronics is reportedly in talks to buy Modine as it expands a cooling business already bolstered by FläktGroup. Modine brings fast-growing data center sales, but weaker margins and a Texas factory still ramping production complicate the potential deal.
Nvidia faced pressure to enlarge its financing backstop before Jensen Huang departed. The leadership change raises questions about support for AI customers, but interim CEO Colette Kress helped build that strategy and chip demand remains a counterweight.
Google launched Gemini 4 Hydrogen and automatic model switching in Antigravity, claiming near-Carbon task success with less quota and faster completion. Lower token rates support the efficiency pitch, but reasoning settings, mixed competitive results and inconsistent benchmark labels leave the cost of completed work to be tested.
Japan is considering safety and reporting duties backed by enforceable orders for advanced AI. The proposal would strengthen its nonbinding framework, but capability thresholds, covered businesses and penalties remain unresolved.
Google says its new fast AI model is reaching Search users worldwide, improving complex answers and source discovery. The rollout expands access to Gemini 4, but its effect on answer quality and website traffic remains unmeasured.
Four nonprofits are asking a California court to stop five AI developers from building or deploying more capable systems. The case seeks enforceable limits even as OpenAI has previously reported a training pause and is launching defensive AI tools.
Expo Simulators gives coding agents remote iOS and Android environments with recordings for reviewers. The launch extends Expo's cloud development services into verification, with per-minute charges and shared capacity limits.
Kleiner Perkins and Clearlake Capital led Mirendil’s $1 billion Series A. Its agent-led model-building experiment points to smaller research teams, but company benchmarks, substantial compute costs and a private beta qualify the promise of wider access.
Mount Thor raised $45 million in equity, alongside separate hardware financing, to expand Apple infrastructure for AI agents and model inference. Existing Mac clouds and workload-specific performance limits put its demand and cost claims to the test.
Salesforce Ventures led a Series C that values Q-CTRL above $1 billion. The funding backs GPS-free navigation and quantum computing software, while undisclosed revenue and contested performance benchmarks leave the commercial case open.
