Bitrise, which thousands of companies use to build and ship mobile apps, has been offline since 13 November after an intruder got into an internal system. It tells customers to rotate every secret, token and certificate stored there.
The company, founded in Budapest in 2014, says on its status page that it detected suspicious activity in one of its internal cloud environments at 16:32 UTC that day and confirmed “unauthorized access to an internal system”. It then took all its services offline. So far, it says, it has found no evidence that customer data, secrets or source code were exposed.
Bitrise describes itself as the platform behind apps from Shopify, TripAdvisor, BuzzFeed “and 8,500 other brands”. At its latest update, posted at 11:53 UTC on 14 November, customers still could not log in, and there was no timeline for a full restore. Builds, Release Management and CodePush, the service that pushes app updates straight to phones, were all listed as a major outage.
Beyond the status page, we found no statement about the incident on Bitrise’s website or blog.
Source: Privacy Affairs · 2026-11-14