Apify rotates API tokens, prompts 2FA resets after breach

Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems. The company suspects the revoked OAuth connections were used to gain access, and it has prompted two-factor authentication resets following the breach.