Botpress Discloses Internal Breach and Customer Credential Risk
AI-generated summary Botpress disclosed on November 6, 2026 that an intruder used a flaw in an authentication proxy and an employee API credential to read bot configurations in 16 customer workspaces. Botpress attributes the intrusion to an effort to obtain AI usage for resale on AI black markets after the attacker operated a network of accounts to consume AI credits.