Senator Hassan Demands Answers on CISA Data Leak Involving Contractor

• •A contractor for CISA reportedly leaked sensitive agency credentials on a public GitHub repository.
• •Files included AWS administrative credentials and plaintext passwords for multiple internal systems.
• •Senator Hassan has called for a classified briefing to address security policy concerns at CISA.

U.S. Senator Maggie Hassan has requested an urgent classified briefing from the Cybersecurity and Infrastructure Security Agency (CISA) regarding a significant data leak involving contractor Nightwing. Reports indicate that sensitive agency account credentials and internal operational files were found in a public GitHub repository. The exposed files included AWS administrative credentials and plaintext usernames and passwords for internal systems. This incident raises serious concerns about CISA's internal security policies, especially given the backdrop of ongoing cyber threats to U.S. critical infrastructure. Security experts have labeled this leak as one of the most egregious government data leaks in recent history. CISA has stated there is no indication that sensitive data was compromised, but questions remain about the security measures that allowed this incident to occur. The agency is under pressure to clarify its internal procedures and the implications of this breach.