Datadog potentially compromised
We are currently investigating an incident involving potential unauthorized access today to some of our systems. As a precaution, we recommend that you take the following actions:
- Reset your Datadog password: All users will receive separate instructions to that end. Google Auth and SAML users won't need to change their password. (Note that passwords are stored using bcrypt with a unique salt)
- Reset your Datadog App Keys: These are the keys allowing access to Datadog APIs. You can find-out more about the reset process in this KB article https://help.datadoghq.com/hc/en-us/articles/210270566
- Rotate other credentials and tokens in use: You are storing credentials or access tokens in Datadog for the following integrations: RSS Feed. We recommend that you change these credentials or revoke these tokens.
We apologize for the disruption and the extra work this requires from you as we choose to err on the side of caution.
We take your security extremely seriously and will do our best to assist you through this process at support@datadoghq.com .
Andrew Becherer Chief Security Officer, Datadog