# Security incident

- Provider: [Apify](https://down.guide/providers/apify)
- Confidence: Confirmed
- Impact: Degraded
- ongoing for 37m
- started 2026-11-11 19:46 UTC
- API (api.apify.com), Actors, General
- id: DWN-42276a6789
- Official page: https://stspg.io/7sp049kjvxqb

## Updates from Apify
### 2026-11-11 19:46 UTC: investigating
On 9 and 10 November 2026, an unauthorized third party gained access to parts of Apify’s internal systems. We detected the activity on 11th November at 12:13 UTC, cut off access, and started an investigation that is still ongoing.
We are currently investigating the scope of the incident, including what user data may have been affected. If we determine that your account or data was affected, we will contact you directly.
We have prevented further unauthorized access and added additional monitoring to our systems. 
As a precaution, we revoked some OAuth connections to external integrations, including GitHub. Affected users of integrations other than GitHub will be prompted to reconnect via a separate email notification.
If our investigation shows that your tokens were affected, we will rotate them on your behalf and notify you.

From the builder: does your app depend on Apify? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=apify) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Apify.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-42276a6789), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.