Gitbook Breached
Summary
GitBook disclosed a security incident in which an attacker gained unauthorized access to infrastructure credentials. The team blocked the attack, offlineed the app and authenticated docs, rotated credentials, and revoked API tokens; investigation indicates potential access to secrets and tokens but no evidence of content modification. Users are advised to rotate their GitBook API tokens and third-party tokens, re-authenticate MCP servers, and monitor status updates for a post mortem.