Dark Web Intelligence on X: " META SAYS HACKERS STOLE CODE AND PERSONAL DATA OF

X • October 13, 2026

🇺🇸 🚨 META SAYS HACKERS STOLE CODE AND PERSONAL DATA OF ~1,500 PEOPLE FROM ITS GITHUB REPOSITORIES

Meta is notifying roughly 1,500 people, most of them US-based employees, after an outside group used a Meta employee's stolen credentials to access some of the company's GitHub repositories.

• 99% of the data taken was business data, mainly source code for some of its products

• The remaining ~1% was personal data that had been committed to the repositories by mistake, against company policy

• Meta cut off the access, brought in GitHub and law enforcement, and is notifying regulators

• Secrets found in the affected repositories have been rotated; new controls and scanning were added

• Affected people are being offered credit and dark-web monitoring

• Meta says this was not a vulnerability in any Meta product and its internal systems were not breached

Meta has not named the attackers, said how the credential was stolen, or said whether MFA was in place, and has not listed the personal data types involved. A single developer credential with broad repository access remains one of the highest-impact entry points; audit repo scopes, enforce phishing-resistant MFA and scan repos for secrets and PII.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Meta Confirms GitHub Breach Exposing Data of 1,500 Employees Meta has notified approximately 1,500 individuals, primarily employees in the U.S., about a breach involving unauthorized access to its GitHub repositories. The breach was facilitated by an employee's stolen credentials, allowing hackers to access software code and a small amount of personal data. Meta reported that 99% of the stolen data was business-related, while the remaining 1% included personal information mistakenly stored in the repositories. Much of the personal data was synthetic or anonymized test data, complicating the identification of genuine records. The breach was detected weeks prior to the notification, and Meta has since worked with GitHub and law enforcement to secure its repositories and prevent future incidents. Affected individuals are being offered credit and dark web monitoring services. Meta has also implemented new security measures and is notifying regulators about the incident. 5 sources 42

Dark Web Intelligence on X: " META SAYS HACKERS STOLE CODE AND PERSONAL DATA OF

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)