Apify Security Incident

On November 9-10, 2026, an unauthorized third party used a compromised credential to access Apify's internal systems and multiple user accounts, which was detected and contained on November 11th. Apify has notified affected customers, revoked OAuth connections as a precaution, rotated critical internal secrets, and is conducting an ongoing investigation with authorities. Users who received notification emails should follow the provided instructions, and those using GitHub integrations should reconnect them through their Actor settings.