securityweek.comarticleMeta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Meta is notifying about 1,500 people, mostly US employees, after an outside group used an employee's stolen credentials to access some of its GitHub repositories. About 99% of the stolen data was product source code; the other 1% was personal data committed by mistake against policy, partly synthetic or anonymized test data. Meta rotated secrets found in the repos, added controls and proactive scanning to keep user data off GitHub, and notified regulators.
TL;DR Meta GitHub repos breached via stolen employee credentials; source code and personal data of ~1,500 people taken, secrets rotated.
Organisations named here
Technologies named here
- Meta GitHub repositories
- GitHub
- Proactive scanning controls
- Credit monitoring and dark web monitoring services
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup