AI evaluation startup Braintrust confirms breach, tells every customer to rotate sensitive keys

AI evaluation startup Braintrust confirmed unauthorized access to one of its AWS cloud accounts containing customer API keys used for accessing cloud-based AI models. The company has urged all customers to rotate their API keys as a precaution. The breach has been contained, internal secrets rotated, and the compromised account locked down, though the root cause remains under investigation. A cybersecurity expert noted potential downstream implications for AI companies relying on Braintrust. The incident mirrors similar cloud credential breaches at CircleCI in 2023 and a recent AWS breach affecting EU Commission entities.