Databreach
ClickUp’s Hardcoded API Key Has Silently Leaked 959 Corporate and Government Emails for 15 Months
28 April 2026 dark6
A hardcoded API key in ClickUp's public JavaScript file exposed 959 corporate and government email addresses for over 15 months...