IT之家 News on October 16: According to foreign media ITMedia, the AI website-building platform Studio was hacked, and the information of all registered users on the platform was leaked, involving user account information, content submitted by users through forms, external service API keys, and more; the exact number of affected data records is still being verified.
Public information shows that Studio is a platform that uses AI to generate websites, offering features such as a visual design editor, a content management system (CMS), forms, external service API interfaces, and Google Sheets integration, claiming that users can "build websites without writing code"; as of 7/2026, the platform had more than 900,000 users.
According to currently available information, hackers attacked the platform from September 30 to October 1, Studio discovered the anomaly during an internal investigation on October 13, and fixed the vulnerability and blocked the attack path before October 14.
Studio stated that the leaked information includes Studio account information, data managed by customers through the platform, live preview links used to preview webpages not yet published, and authentication information saved in various settings. Among these, account information includes usernames, email addresses, and hashed passwords. Customer-managed data included content submitted through website forms.
At present, Studio is investigating the cause of the incident and determining the specific scope of impact, and has meanwhile replaced the authentication credentials in its system used for payment, login, and other functions. The company stated that no data tampering or deletion has been found so far, and whether subsequent damage such as unauthorized account logins or information misuse has occurred is still under further investigation.