Status: Resolved
Affected Environment: Staging
Resolution Time: Approximately 180 minutes

We received a security alert from Anthropic regarding suspicious activity involving one of our API keys.
As an immediate precaution, we revoked the exposed API key and temporarily shut down both Staging and Production environments while our engineering team conducted a forensic investigation.

Root Cause

The investigation identified an exposed Anthropic API key in our Staging demo instance. The key was accessible through the demo application and appears to have been discovered and used by an unauthorized actor or automated agent.
Actions Taken

• Immediately revoked the compromised Anthropic API key.
• Temporarily disabled Staging and Production environments to contain potential exposure.
• Conducted a forensic investigation to identify the source and scope of the incident.
• Addressed the identified security issues.
• Verified application functionality before restoring services.

Current Status

Resolved. All Staging and Production instances are back online and operational.

The investigation and remediation process took approximately three hours.
We are reviewing additional safeguards around API key management, secret exposure prevention, and monitoring to reduce the risk of similar incidents.

Impact

The confirmed exposure originated in the Staging demo environment. Production was temporarily unavailable as a precautionary measure. No confirmed Production compromise has been identified in the information available for this summary.