Archive — US — techcrunch
AI evaluation startup Braintrust confirms breach, tells every customer to rotatesensitive keys
Braintrust, an AI evaluation startup, confirmed a data breach affecting customer API keys stored in its AWS account; it urged all clients to rotate their keys. No wider exposure has been identified, but the incident raises concerns about security in AI cloud services, echoing previous breaches like CircleCI's in 2023.
Key points
- Braintrust confirmed unauthorized access to its AWS account, which contained customer API keys.
- Customers were urged to revoke and replace their API keys as a precautionary measure.
- The company did not find evidence of broader exposure as of now but is investigating the cause of the breach.
- Communication to customers was described as being out of 'abundance of caution.'
- The incident highlights ongoing cybersecurity risks associated with cloud services, particularly APIs.
Why it matters
- This breach aligns with rising concerns about data security in AI and cloud services, a major theme in IT trends for 2025.
- Past incidents, such as the CircleCI breach, indicate that API key exposure can have severe repercussions for clients relying on secure access.
- The EU has previously experienced significant breaches, raising awareness about the importance of strong cybersecurity measures.
The breach at Braintrust underscores the critical need for vigilance in cloud security, especially for startups managing sensitive AI data, as it reflects broader cybersecurity challenges facing the industry.