GitBook said an attacker used AI agents to gain unauthorized access to some of its infrastructure credentials on November 2, 2026. GitBook has not explained how the tools were used, which AI systems were involved or how the credentials were obtained; its disclosure does not establish that its own AI products were responsible.
GitBook said integration secrets, API tokens and questions submitted to its AI assistant may have been exposed, but it found no evidence that hosted content was modified. It took services requiring authentication offline, later restored access while warning that some services could remain degraded, and invalidated customer API tokens. GitBook told customers to replace those tokens and credentials used to connect external services. PancakeSwap temporarily took its documentation offline as a precaution, said its app and documents were not compromised, then restored the documents on infrastructure it controls.
