Snapshot 219440
Normalized text
Scripts and page chrome removed; this is what change detection compares.
October 2026 Security Incident UPDATE: We have restored read-only access to Drive as of 2PM ET on Wednesday, October 28. Access to Studio, Jobs, and Deployments will follow, and we will provide updates regarding their timing. Access to the Drive is available through the CLI. The Lightning SDK is required. Web UI access will not be available at this time. Instructions are available here. On October 15, 11:00 PM UTC we identified a security incident on the Lightning Platform involving unauthorized access to credentials. We revoked all user access to the Lightning Platform on October 16 at 1:00 AM UTC to address the issue. The incident involves the Lightning Studio Platform services like Studio, Deployments, Pipelines, and Drive and not the GPU cluster rental infrastructure or managed services like Kubernetes and SLURM. We believe that certain customer credentials were compromised to gain access to environments and connected third-party services. We have revoked all identified credentials used in the incident and continue to investigate and monitor the environment. This is an active investigation and during this time the Platform will remain inaccessible to all users as our teams focus on addressing the event. We are actively working to restore access to the service. We are working with an independent external cybersecurity firm to further assist with the ongoing investigation. We recognize the concern and disruption this creates for our affected customers. Customers identified as potentially affected to date have been notified and provided account-specific information to assist with response efforts. Out of an abundance of caution, we recommend all users complete the following actions regardless of whether we contacted you about this event: Rotate secrets, API keys, and revoke credentials stored in your AI Studios environment such as Github credentials. Update credentials used for third-party services accessed by your virtual machines. We have revoked identified keys associated with your cloud accounts used on the Lightning Platform. Please review your third-party systems and access logs for unauthorized access during this window. If you have not received a notification, your environment has not been identified as affected based on our investigation to date. If you have questions or observe suspicious activity please contact us at support@lightning.ai.