# Apify rotates API tokens, prompts 2FA resets after breach

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/apify-rotates-api-tokens-prompts-2fa-resets-after-breach/) · 2026-11-12 · Security
Page: https://themorning.dev/story/apify-rotates-api-tokens-prompts-2fa-resets-after-breach-7927f7b9de97b7ad
Kind: security · Impact: high

## In brief

- Apify detected unauthorized access to its internal systems.
- Apify rotated critical internal secrets and revoked some third-party OAuth connections.

## Why it matters

If you use Apify, your API tokens and OAuth connections may have been changed or revoked, and you may need to reset two-factor authentication.

## What to do

- Reset two-factor authentication on your Apify account when prompted
- Re-authorize any third-party OAuth connections to Apify that were revoked

## Coverage

- [Apify rotates API tokens, prompts 2FA resets after breach](https://www.bleepingcomputer.com/news/security/apify-rotates-api-tokens-prompts-2fa-resets-after-breach/) — BleepingComputer, 2026-11-12

Tags: security, breach, apify, api-tokens, oauth

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev