Braintrust Breach Prompts Urgent API Key Rotation Over Exposure Risk

Braintrust is an observability platform that helps companies track, evaluate and improve generative AI applications. Customers can connect API keys from model providers such as OpenAI to the service. If stolen, these credentials could allow attackers to use corporate accounts to access models, creating data security risks and unauthorized charges.

Braintrust confirmed that its internal AWS account was accessed without authorization and that customers’ API keys for AI model providers stored on the platform may have been exposed. It has notified affected users to revoke and regenerate their keys immediately. The company has not disclosed the exact date of the breach, the number of customers affected or any known losses.