---
title: GitBook says an attacker using AI agents got some of its infrastructure credentials on Nov 2; it revoked every personal API token and tells customers to rotate integration secrets and re-authenticate its MCP server | ctxsec
url: https://ctxsec.com/items/gitbook-nov-2-ai-agent-attack-infrastructure-credentials-all-api-tokens-revoked
description: "Documentation platform GitBook says that at 19:00 CET on Nov 2 an attacker in 'a sophisticated, highly targeted attack using AI agents' gained access to some of its infrastructure credentials. GitBook took the app and authenticated docs sites offline, replaced every infrastructure secret and invalidated all customer API tokens. It says the attacker may have accessed integration tokens, Git Sync secrets, API tokens and questions visitors asked GitBook Assistant, and it has found no evidence that customer content was modified. Services were back by Nov 3 afternoon; a full post-mortem is promised."
status: "official (GitBook security incident notice, Nov 3, updated 16:21 CET). GitBook has not said how the AI agents were used or how the credentials were obtained"
published: 2026-11-03
---

> Documentation platform GitBook says that at 19:00 CET on Nov 2 an attacker in 'a sophisticated, highly targeted attack using AI agents' gained access to some of its infrastructure credentials. GitBook took the app and authenticated docs sites offline, replaced every infrastructure secret and invalidated all customer API tokens. It says the attacker may have accessed integration tokens, Git Sync secrets, API tokens and questions visitors asked GitBook Assistant, and it has found no evidence that customer content was modified. Services were back by Nov 3 afternoon; a full post-mortem is promised.

[← Cybersecurity News](/news) · [markdown](/items/gitbook-nov-2-ai-agent-attack-infrastructure-credentials-all-api-tokens-revoked.md)

official (GitBook security incident notice, Nov 3, updated 16:21 CET). GitBook has not said how the AI agents were used or how the credentials were obtained

2026-11-03

### GitBook says an attacker using AI agents got some of its infrastructure credentials on Nov 2; it revoked every personal API token and tells customers to rotate integration secrets and re-authenticate its MCP server

**What GitBook asks customers to do:**

- Create new GitBook API tokens (all personal tokens were revoked).
- Rotate third-party API tokens or secrets used to connect other tools to GitBook, including secrets in published integrations.
- Re-authenticate the GitBook MCP server.

**Worth adding:** Git Sync connects GitBook to code repositories, so revoke and reissue the GitHub/GitLab app or token GitBook used and review recent commits and repository access from it. If your docs are public, check that nothing was changed in the published content and that no links or install commands were swapped.

This lands in the same week as other disclosed intrusions at developer and crypto infrastructure providers (see our [Chainstack item](/items/chainstack-breach-oct-26-31-account-db-password-hashes-rotate-node-credentials)). GitBook has not linked its incident to them, and its notice does not say which AI systems were involved.

Sources: [GitBook: Security incident (Nov 3, 2026)](https://www.gitbook.com/status/security-incident-2026-11-03) · [Decrypt: Crypto docs host GitBook hit by AI agent security breach](https://decrypt.co/382465/crypto-docs-gitbook-ai-agent-security-breach)