Bubble says an attacker accessed users' third-party API keys and tokens in an active security incident

Teaser from the source

On Oct 26 2026, no-code platform Bubble posted on status.bubble.io that it is responding to an active security incident after detecting unauthorized access to parts of its systems. Bubble has confirmed the attacker accessed third-party tokens and credentials, such as API keys used in the API Connector and plugins, belonging to a subset of Bubble users, and says it is contacting affected users directly. As part of containment it may temporarily take parts of its infrastructure offline, which can affect both the Bubble editor and live Bubble apps. Bubble says the scope may change as the investigation continues and that official messages will come only from bubble.io and status.bubble.io.

This is the RSS-feed teaser. Read the full article at the original source.