Hackers breached Meta GitHub repositories using stolen credentials. They took source code and personal data of roughly 1,500 people. Most affected were Meta employees in the US. Meta detected the intrusion a few weeks ago. It shut down access and involved GitHub and law enforcement. 99% of the stolen data was business code. 1% was personal data mistakenly stored on GitHub. Some of that data was synthetic or anonymized test records. Meta does not believe the hackers targeted its data specifically. The company rotated secrets and hardened product security. It is adding controls to prevent user data from being stored on GitHub. Impacted individuals are being offered credit and dark web monitoring.
What changed
Personal data was not supposed to be stored on GitHub.
What it unlocks
Attackers accessed source code and some personal data via stolen credentials.
- 1,500 people affected
- 99% business code, 1% personal data
Sources