# Bitrise: Critical incident: Security Incident

> Critical incident: Security Incident. Detected 2026-11-13 by Rewindex: what changed on Bitrise’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/ia0acbba012a042
Last updated: 2026-11-13T20:53:39Z

**Summary:** _summary pending_
- Kind: Major incident · Label: critical (vendor)
- Changed: 2026-11-13 20:44 UTC · Detected: 2026-11-13 20:53 UTC
- [Source: https://status.bitrise.io/incidents/7055z4g9nbck](https://status.bitrise.io/incidents/7055z4g9nbck)
- [Company: Bitrise](https://rewindex.com/company/bitrise.md)
- Versions: before (none: first archived) → after incident\_version:177/7055z4g9nbck@e6baf029384e
- Change 1 of 7 for this incident

## Discussed on Hacker News

- [Bitrise Suffers Security Incident](https://news.ycombinator.com/item?id=50489750): 3 points, 1 comments, posted 2026-11-13 21:13 UTC, posted 29 min after the vendor’s first update
- [Bitrise reports an active security incident](https://news.ycombinator.com/item?id=50490355): 1 points, 0 comments, posted 2026-11-13 21:48 UTC, posted 64 min after the vendor’s first update

Incident page (full timeline): [Security Incident](https://rewindex.com/company/bitrise/incidents/7055z4g9nbck.md)
## What changed

**1. Added: Title**

```diff
+ Security Incident
```

**2. Added: Impact**

```diff
+ critical
```

**3. Added: Status**

```diff
+ investigating
```

**4. Added: Start time**

```diff
+ 2026-11-13 20:44 UTC
```

**5. Added: Affected components**

```diff
+ 👥 Account Management, Bazel Remote Execution, Build Cache, ⚙️ Builds - CI, 🥫 Cache - Bazel Remote Execution, 🥫 Cache - Build Cache, 🥫 Cache - Key Value Dependency Cache Service, 📲 CodePush, 📊 Insights, Key Value Dependency Cache Service, 📦 Release Management
```

**6. Added: Update** (investigating) · 2026-11-13 20:44 UTC

```diff
+ We are responding to a security incident affecting some of Bitrise’s internal secrets, detected within the last hour. As a precaution we have temporarily taken Bitrise offline. We have no confirmation that any customer data or source code was accessed and are investigating urgently. Out of an abundance of caution, we recommend rotating any Git and source-code access credentials connected to Bitrise. We will share updates as soon as we know more. Scope: All Users Severity: SEV 1 When will the next update be available? You can expect a status update approximately 1 hour from now.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-11-13 20:44 UTC | Critical incident: Security Incident (this change) | critical |
| 2026-11-13 21:53 UTC | [Incident updated: Security Incident](https://rewindex.com/change/r445e00d56a966a.md) |  |
| 2026-11-13 23:03 UTC | [Incident updated: Security Incident](https://rewindex.com/change/ra8b289fb472052.md) |  |
| 2026-11-14 00:13 UTC | [Incident updated: Security Incident](https://rewindex.com/change/raec287d74a81ed.md) |  |
| 2026-11-14 01:33 UTC | [Incident updated: Security Incident](https://rewindex.com/change/rcd2b30cb973a39.md) |  |
| 2026-11-14 02:33 UTC | [Incident updated: Security Incident](https://rewindex.com/change/ra581c6253b80db.md) |  |
| 2026-11-14 03:43 UTC | [Incident updated: Security Incident](https://rewindex.com/change/r6c7511c0059ed9.md) |  |

Next: [change](https://rewindex.com/change/r445e00d56a966a.md) · All Bitrise changes: [timeline](https://rewindex.com/company/bitrise/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Critical incident: Security Incident on Bitrise’s status page, changed 2026-11-13 20:44 UTC (change 1 of 7).

- Canonical URL: https://rewindex.com/change/ia0acbba012a042
- Citation: Bitrise, “Critical incident: Security Incident” (2026-11-13 20:44 UTC). Archived by Rewindex: https://rewindex.com/change/ia0acbba012a042 (CC BY 4.0).
- Markdown link: `[Bitrise: Critical incident: Security Incident (2026-11-13)](https://rewindex.com/change/ia0acbba012a042)`


---
Canonical: https://rewindex.com/change/ia0acbba012a042 · Markdown: https://rewindex.com/change/ia0acbba012a042.md · JSON: https://rewindex.com/api/v1/changes/ia0acbba012a042 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-14T04:28:11.027Z