The unauthorized intrusion took place on November 9 and 10, 2026, and was officially terminated on November 11 at 12:13 UTC. Apify confirmed that compromised credentials allowed the attacker to reach internal systems and access certain customer data. Direct notifications have been sent to impacted accounts, while users without alerts are not currently identified as affected. In response, the platform rotated critical internal secrets and revoked select OAuth connections, including integrations with GitHub.
Key points
Customers whose personal information and stored data were accessed have been notified dir…: Customers whose personal information and stored data were accessed have been notified directly with instructions.
Users building Actors from private GitHub repositories are advised to reconnect their ext…: Users building Actors from private GitHub repositories are advised to reconnect their external integration.
An ongoing investigation continues to determine the full scope of impacted data ahead of…: An ongoing investigation continues to determine the full scope of impacted data ahead of a planned post-mortem report.
Sources checked by our analysis pipeline: 1
Update: We have notified customers whose personal information or stored data was accessed in this incident. Details are in the email they received. If you haven’t received an email from us, we have not identified your account as affected so far. We will contact any additional customers directly if this changes.
Next update within 24 hours.
Posted Nov 12, 2026 - 17:16 CET
Update
Update: Our investigation is ongoing.
On 9 and 10 November, an unauthorized third party used a compromised credential to obtain a number of account credentials and accessed related Apify accounts. This access path is closed, and we have detected no further activity from the attacker since 11 November.
We are notifying affected users individually. Do not hesitate to reach out to us with questions.
We have: - As a precaution, revoked some OAuth connections to external integrations. Our investigation has not found that these connections could be used as an attack vector. - As a precaution, rotated various critical internal secrets. - We continue with dozens of additional activities, about which we will share information in…
Officials in Kyiv are raising alarms over connectivity issues on the satellite network, alleging that deliberate speed caps are meant to pressure their position ahead of talks with Moscow. The aerospace company firmly disputes these allegations, insisting the infrastructure continues to operate without any newly imposed constraints.
Global email connectivity failed across mobile apps and web browsers after an infrastructure capacity strain disrupted corporate communications. The company responded by rerouting system traffic away from damaged segments and rebooting hardware to revive normal operations. Investigators are actively working to determine whether the failure stemmed from genuine user activity or an internal configuration error.
The incident marks another disruption to enterprise workflows reliant on Microsoft's productivity suite. Affected users experienced service interruptions while accessing their accounts and communications. Technical teams are monitoring the situation as background factors continue to emerge.