# \[CircleCI Security Alert\] Rotate any secrets stored in CircleCI

**URL:** <https://discuss.circleci.com/t/circleci-security-alert-rotate-any-secrets-stored-in-circleci/46479>\
**Category:** Security\
**Created:** [January 5, 2023, 2:50am UTC](https://discuss.circleci.com/t/circleci-security-alert-rotate-any-secrets-stored-in-circleci/46479 "2023-01-05T02:50:53Z")\
**Posts on this page:** 1\
**Showing post:** 68

<div class="post-metadata">

**Author:** ![jerdog](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/jerdog/32/32130_2.png) [@jerdog](https://discuss.circleci.com/u/jerdog)\
**Post date:** [January 5, 2023, 7:42pm UTC](https://discuss.circleci.com/t/circleci-security-alert-rotate-any-secrets-stored-in-circleci/46479/68 "2023-01-05T19:42:43Z")

</div>

> [@Vespinosa](#):
>
> So, are we safe rotating all the environment variables? How do we know that this is not still open/vulnerable? To be honest, the information provided about the issue is really poor.

At this point, we are confident that there are no unauthorized actors active in our systems; however, out of an abundance of caution, we want to ensure that all customers take certain preventative measures to protect your data as well. You are safe to rotate any and all secrets stored in CircleCI.

We will provide you updates about this incident, and our response, as they become available.

---

_[View the full topic](https://discuss.circleci.com/t/circleci-security-alert-rotate-any-secrets-stored-in-circleci/46479)._