Bleeping Computer's coverage is maybe a bit more detailed Apify rotates API tokens, prompts 2FA resets after breach (https://www.bleepingcomputer.com/news/security/apify-rotates...)