AI evaluation startup Braintrust confirms breach, tells every customer to rotate sensitive keys

Braintrust said one of its AWS accounts was accessed without authorization.

The account contained customer API keys, and the company urged all customers to revoke and replace sensitive keys.

Braintrust says the incident has been contained and it is investigating how the breach happened.

The exposure could create security risks for customers’ AI and cloud systems if stolen credentials were reused.