GitBook Revokes All Personal API Tokens After Breach

GitBook revoked all personal API tokens after a breach in which attackers used AI agents and may have exposed integration credentials and questions submitted by documentation visitors. The documentation platform did not disclose how many tokens or users were affected, nor the volume of exposed data. The incident matters because GitBook integrations connect to code repositories, CI pipelines and other developer tooling, so leaked credentials could grant access beyond the documentation site itself. Users should watch for token reissuance guidance, integration audits and any customer notification, plus details on whether the AI-agent attack vector exploited a platform flaw or stolen credentials.