capital · May 18, 2026
Braintrust Confirms AWS Breach and Urges All Customers to Rotate API Keys
Share the canonical public link.
Braintrust confirmed unauthorized access to one of its AWS cloud accounts on May 4, 2026, and notified every customer on May 5, 2026 to revoke and replace stored API keys. The incident exposed org-level AI provider keys used for cloud-based model access. Braintrust locked the compromised account, audited systems, and rotated internal secrets. Founder and CEO Ankur Goyal leads the San Francisco AI evaluation startup that raised $80 million in its February 2026 Series B at an $800 million valuation.
Spend governor blocked model creation: provider_circuit_open (lane=battlemap, provider=together)