Skip to main content
Northflank

Security incident

Major outage Monitoring a fix since · started · Northflank's page

Updates every minute from the provider's page.

Level
confirmed
Worst impact
Major outage
Down Index
45of 100

Summary

Northflank says its security incident is in monitoring. It believes the attack vector was contained within an hour of the first alert, and its platform and customer workloads have stayed online with no evidence that workloads or workload data were accessed.

Written by anthropic/claude-haiku-5.5 from Northflank's own updates.

What to do

  • Check whether your product depends on Northflank. Check your stack

    Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.
  • Northflank says a fix is out: check your own error rates before you undo any failover.

  • Watch Northflank's own updates; this page re-reads them every minute.

  • Subscribe to Northflank's feed to hear about the next one first. RSS feed

    https://down.guide/feed?provider=northflank works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from Northflank 2

  1. monitoring

    We believe the attack vector was contained within an hour of the first alert. Our investigation shows no sign that the attacker was in our environment after the attack. Independent forensic auditors began reviewing the attack together with Northflank over the weekend, and they c…

    provider

  2. monitoring

    The platform has remained operational and customer workloads have remained online throughout the incident. At this time, we have found no evidence that customer workloads or workload data were accessed. The first known decryption of secrets occurred between 02:39 UTC and 03:08 U…

    provider

Reports count in aggregate; nothing about you is shown.

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.

Questions about DWN-2b6b739d6e

Is Northflank down right now?

Northflank reports major outage (Security incident), open since 2026-10-30 13:40 UTC; it says a fix is out and it is monitoring. Live state for every component: https://down.guide/northflank.

What caused it?

Northflank hasn't published a root cause. If it does, it shows here.

Where does this come from?

Northflank's official status page, https://status.northflank.com, quoted verbatim. down.guide's own probes, reports and social counts are labeled as ours.