rewindex

ChangesBitriseSecurity Incident

Bitrise: Critical incident: Security Incident

Major incidentcritical (vendor)Changed Detected status.bitrise.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Discussed on Hacker News

Threads are matched automatically by vendor name and timing; points and comments refresh every 30 minutes. Method and limits.

Incident page: the full timeline of updates

What changed

Struck in red is what Bitrise removed; blue is what they added. Muted text is unchanged context.

AddedTitle#1
Before: not present
After: Security Incident
AddedImpact#2
Before: not present
After: critical
AddedStatus#3
Before: not present
After: investigating
AddedStart time#4
Before: not present
After: 2026-11-13 20:44 UTC
AddedAffected components#5
Before: not present
After: 👥 Account Management, Bazel Remote Execution, Build Cache, ⚙️ Builds - CI, 🥫 Cache - Bazel Remote Execution, 🥫 Cache - Build Cache, 🥫 Cache - Key Value Dependency Cache Service, 📲 CodePush, 📊 Insights, Key Value Dependency Cache Service, 📦 Release Management
AddedUpdateinvestigating#6
Before: not present
After: We are responding to a security incident affecting some of Bitrise’s internal secrets, detected within the last hour. As a precaution we have temporarily taken Bitrise offline. We have no confirmation that any customer data or source code was accessed and are investigating urgently. Out of an abundance of caution, we recommend rotating any Git and source-code access credentials connected to Bitrise. We will share updates as soon as we know more. Scope: All Users Severity: SEV 1 When will the next update be available? You can expect a status update approximately 1 hour from now.

First version of this incident archived by Rewindex. View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

TodaySaturday, November 14Sat, Nov 14

4 incident changes

YesterdayFriday, November 13Fri, Nov 13

3 incident changes

Cite this

Critical incident: Security Incident on Bitrise’s status page, changed 2026-11-13 20:44 UTC (change 1 of 7).

Title
Critical incident: Security Incident
Vendor
Bitrise
Date
URL
https://rewindex.com/change/ia0acbba012a042

All Bitrise changesBitrise profileMarkdownJSON