AI evaluation startup Braintrust has urged customers to revoke and replace their API keys after a reported breach in one of its Amazon Web Services (AWS) cloud accounts. The incident, which contained customer API keys necessary for accessing cloud-based AI models, highlights the ongoing risks associated with third-party platforms.

The company stated that unauthorized access was confirmed but no evidence of broader exposure has been found as yet. Braintrust recommended that all customers rotate their stored API keys “out of an abundance of caution.”

Braintrust provides a platform for companies to monitor AI models and products, valuing itself as an 'operating system for engineers building AI software.' Following the breach, co-founder Jaime Blasco warned that such incidents could have downstream implications for affected customers.

The cybersecurity landscape remains fraught with challenges. Hackers often target corporate accounts on cloud services or third-party platforms to steal secrets like API keys, gaining unauthorized access without needing to break into the company’s systems. This incident serves as a stark reminder of the importance of robust security measures across all digital interfaces.