Observed incident

Lightning AI restricts Studio access after credential compromise

Reported

Published here

What happened

Lightning detected unauthorized access to credentials and said it believed some customer credentials were used to reach environments and connected third-party services. It shut off platform access while investigating.

Parties and reporting

AI tools and systems: Lightning Studio, Deployments, Pipelines and Drive, Cloud and connected-service credentials

Outcome

Lightning revoked identified credentials and engaged outside investigators. It restored CLI-only, read-only Drive access on October 28. Its bulletin and status record do not establish full Studio, Jobs or Deployments recovery.

Operating lesson

Rotate studio secrets with their issuers, including GitHub and cloud keys. Review access to services reachable from each virtual machine.

Evidence and limits

Detection was October 15 at 23:00 UTC. Public updates began October 16. Lightning excluded GPU rental infrastructure and managed Kubernetes and SLURM services from its stated scope. Affected customer count and initial access method remain undisclosed.

Sources