Major Developer Documentation Platform GitBook Hit by AI Agent-Driven Attack, Crypto Projects’ Docs Affected GitBook reported that attackers used AI agents to gain unauthorized access to some of its infrastructure credentials at 1:00 p.m.
The company detected and blocked the attack, temporarily suspending some services. Potentially exposed data includes integration tokens, Git Sync secrets, API tokens, and visitor questions submitted to GitBook Assistant. No evidence of content modification has been found.
GitBook rotated all infrastructure credentials and secrets, revoked all customer API tokens, and advised users to rotate third-party credentials and re-authenticate GitBook MCP connections. By 10:21 a.m. EST on November 3, its app, API, and published docs were accessible again, though some services remained degraded.