Allium instructed affected customers to generate replacement API keys, change their passwords, and enable multi-factor authentication following the breach.