Sentry rotates secrets after Northflank incident, finds no evidence of customer impact

Sentry began rotating secrets and suspending deployments after being notified of a Northflank security incident on October 30, 2026. The company says it has found no evidence that customer data or customer-facing services were affected. It took those precautions before Northflank published its own recommendation to customers, according to Sentry’s security notice.

Internal services, not production infrastructure

Sentry describes its Northflank footprint as small. It runs only internal, demonstration or experimental services there, with no production infrastructure. Its customer-impact assessment applies to its own use of Northflank; the notice does not offer an assessment of the incident’s effects on other Northflank customers.

As a Northflank customer, Sentry received notification of the ongoing incident and immediately opened an investigation. The company says it began rotating secrets and suspending active deployments out of caution. Those actions were already underway when Northflank published its customer recommendation at 13:40 UTC.

Should your Sentry data be impacted, you will be contacted directly.

Sentry, notice about the Northflank security incident

Access review and continued monitoring

After beginning its precautionary response, Sentry reviewed access logs for all exposed services. It says it identified no unusual access. That review followed the initial investigation and deployment suspensions, providing a check on activity involving the services it operated on Northflank.

The notice also directs customers to Sentry’s existing Incident Management Policy, which the company says governs its handling of vulnerabilities. Sentry says that policy is outlined in its SOC 2 report and ISO 27001 certificate. Customers can access those documents within the product under Settings, then Legal & Compliance.

Sentry says it is continuing to monitor its environments and will take additional remediation actions if required. Its commitment to notify customers directly applies if their Sentry data is affected.