AI Website Building Platform Studio Suffers Major Data Breach
The AI-powered web building platform Studio suffered a cyberattack between September 30 and October 1, exposing user account details, form submissions, and external API keys for all registered users. The platform discovered the anomaly during an internal investigation and patched the vulnerability by October 14. This incident highlights the security risks facing growing AI platforms that manage sensitive user data and credentials for over 900,000 users. Leaked API keys and authentication credentials could potentially expose third-party services connected to these user websites to secondary cyber threats. The breached data includes usernames, email addresses, password hashes, real-time preview links, and platform-saved configuration credentials. Studio stated that it has already replaced the internal authentication credentials used for payment and login functions, though investigations into data misuse are still ongoing.
## BACKGROUND
An API key (Application Programming Interface Key) is a unique code used to authenticate and authorize software applications to access specific web services or APIs. Password hashing is a cryptographic process that transforms user passwords into a secure string of characters, making it computationally difficult to reverse back to the original plain text.