GitBook says AI-powered cyberattack grabbed infrastructure credentials

GitBook is in the hot seat. The documentation platform says it got hit by a sophisticated cyberattack powered by AI agents, according to an alert from Cointelegraph. The intruders got their hands on infrastructure credentials.

That's the scary part. GitBook warns those stolen credentials may have exposed customer API tokens, integration secrets and user queries — the kind of keys that can unlock far more than a docs page.

Full scope isn't public yet. GitBook hasn't said how many accounts or integrations were caught in the blast, and there's no word on who's behind it or whether the breach has been fully shut down.

The AI-agent angle is what sets this one apart. Rather than a lone script kiddie, the attack is described as machine-driven and sophisticated, a sign of how automated tooling is reshaping the threat landscape.

For teams using GitBook, the exposure of API tokens and integration secrets is the real headache — those credentials bridge outside services, so leaked ones can be replayed elsewhere.

Expect GitBook to keep updating users as it digs through the damage. Anyone with tokens or integrations tied to the platform will be watching closely.