Unattributed: Credential compromise

The company says an attack used AI agents and may have exposed integration credentials and questions submitted by documentation visitors.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://thedefiant.io/news/security/gitbook-revokes-all-personal-api-tokens-after-breach

Record history

First seen: 2026-11-03T17:18:50.000Z. Last updated: 2026-11-03T20:56:13.920Z. Revision: 1.