Apify rotates API tokens and prompts 2FA resets after breach
Apify detected unauthorized access to parts of its internal systems between November 9 and 10, 2026. The company cut off the unauthorized party’s access, launched an investigation, invalidated internal credentials, rotated API tokens, and reset active sessions.
CERT24