Cyberkendra Meta Confirms GitHub Breach Exposing Data of 1,500 Employees
Article Content
- •1,500 individuals, mostly Meta employees, were impacted by the GitHub breach.
- •99% of the stolen data was business-related software code; only 1% was personal data.
- •Meta is enhancing security measures and offering monitoring services to affected individuals.
Meta has notified approximately 1,500 individuals, primarily employees in the U.S., about a breach involving unauthorized access to its GitHub repositories. The breach was facilitated by an employee's stolen credentials, allowing hackers to access software code and a small amount of personal data. Meta reported that 99% of the stolen data was business-related, while the remaining 1% included personal information mistakenly stored in the repositories. Much of the personal data was synthetic or anonymized test data, complicating the identification of genuine records. The breach was detected weeks prior to the notification, and Meta has since worked with GitHub and law enforcement to secure its repositories and prevent future incidents. Affected individuals are being offered credit and dark web monitoring services. Meta has also implemented new security measures and is notifying regulators about the incident.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Meta in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was exposed?
How did the breach occur?
What actions is Meta taking in response?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…