docs: ✏️ entry for auth0 incident

ministryofjustice · Feb 6, 2025 · 9c8a7f5 · 9c8a7f5
1 parent e729e16
commit 9c8a7f5
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 0 deletions.
diff --git a/runbooks/source/incidents/2025-01-13-auth0-credentials.html.md.erb b/runbooks/source/incidents/2025-01-13-auth0-credentials.html.md.erb
@@ -0,0 +1,24 @@
+---
+title: Incident on 2025-01-13 - Auth0 Terraform provider credentials exposed
+weight: 1
+---
+
+# Incident on 2025-01-13 - Auth0 Terraform provider credentials exposed
+
+- **Key events**
+  - First detected: 2025-01-13 10:13
+  - Incident declared: 2025-01-13 12:09
+  - Repaired: 2025-01-14 1600
+  - Resolved: 2025-01-14 16:53
+
+- **Time to repair**: 1d 5h 47m
+
+- **Time to resolve**: 1d 6h 40m
+
+- **Identified**: Notification from security team regarding leaked auth0 credentials.
+
+- **Impact**: auth0 credentials were exposed in infra repository.
+
+- **Context/Resolution/Review actions**:
+
+Refer to the Cloud Platform security repository for full details of incident.
diff --git a/runbooks/source/incidents/index.html.md.erb b/runbooks/source/incidents/index.html.md.erb
@@ -5,6 +5,9 @@ weight: 45
 
 # Incident Log
 
+## Q1 2025 (January-April)
+
+* [Incident on 2025-01-13 - Auth0 Terraform provider credentials exposed](incidents/2025-01-13-auth0-credentials)
 ## Q3 2024 (July-September)
 
 - **Mean Time to Repair**: 1h 39m