{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Lightning AI takes Studio platform offline after customer credentials compromised · updates",
  "home_page_url": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026",
  "feed_url": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026/feed.json",
  "description": "On Oct 15 2026 at 23:00 UTC Lightning AI identified unauthorized access to credentials on its Lightning Studio platform and revoked all user access two hours later. Lightning believes certain customer credentials were used to reach customer environments and connected third-party services. Studio, Deployments, Pipelines and Drive are affected; GPU cluster rental and managed Kubernetes/SLURM are not. As of Oct 25 the platform is still inaccessible while an external firm investigates. Lightning tells all users to rotate secrets stored in Studios (such as GitHub credentials) and third-party credentials used by their VMs.",
  "language": "en",
  "_pwn": {
    "slug": "lightning-ai-studio-credential-breach-oct-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-25-680c937d",
      "url": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-25-680c937d",
      "title": "Lightning AI takes Studio platform offline after customer credentials compromised: Platform still inaccessible; status page incident unresolved. Lightning says certain customer credentials were used to reach environments and connected third-party services, identified credentials are revoked, and an external cybersecurity firm is investigating.",
      "content_text": "Lightning AI takes Studio platform offline after customer credentials compromised: Platform still inaccessible; status page incident unresolved. Lightning says certain customer credentials were used to reach environments and connected third-party services, identified credentials are revoked, and an external cybersecurity firm is investigating.\n\nSource: https://status.lightning.ai/",
      "date_published": "2026-10-25T00:00:00.000Z",
      "external_url": "https://status.lightning.ai/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-16-8a460202",
      "url": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-16-8a460202",
      "title": "Lightning AI takes Studio platform offline after customer credentials compromised: Status page changes the 'emergency maintenance' notice to 'Service is down to address a security incident' and links the incident notice.",
      "content_text": "Lightning AI takes Studio platform offline after customer credentials compromised: Status page changes the 'emergency maintenance' notice to 'Service is down to address a security incident' and links the incident notice.\n\nSource: https://status.lightning.ai/",
      "date_published": "2026-10-16T20:34:00.000Z",
      "external_url": "https://status.lightning.ai/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-16-21fa29ca",
      "url": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-16-21fa29ca",
      "title": "Lightning AI takes Studio platform offline after customer credentials compromised: Lightning AI revokes all user access to the Lightning Platform (Studio, Deployments, Pipelines, Drive); GPU cluster rental and managed Kubernetes/SLURM are not affected.",
      "content_text": "Lightning AI takes Studio platform offline after customer credentials compromised: Lightning AI revokes all user access to the Lightning Platform (Studio, Deployments, Pipelines, Drive); GPU cluster rental and managed Kubernetes/SLURM are not affected.\n\nSource: https://lightning.ai/security-incident/",
      "date_published": "2026-10-16T01:00:00.000Z",
      "external_url": "https://lightning.ai/security-incident/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-15-5dec1f1d",
      "url": "https://pwn.watch/i/lightning-ai-studio-credential-breach-oct-2026#2026-10-15-5dec1f1d",
      "title": "Lightning AI takes Studio platform offline after customer credentials compromised: Lightning AI identifies unauthorized access to credentials on the Lightning Studio platform.",
      "content_text": "Lightning AI takes Studio platform offline after customer credentials compromised: Lightning AI identifies unauthorized access to credentials on the Lightning Studio platform.\n\nSource: https://lightning.ai/security-incident/",
      "date_published": "2026-10-15T23:00:00.000Z",
      "external_url": "https://lightning.ai/security-incident/",
      "tags": [
        "high"
      ]
    }
  ]
}