Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.

News > Attacks & Threats > GitHub Confirms Breach, 4K Internal Repos Stolen

GitHub Confirms Breach, 4K Internal Repos Stolen

GitHub confirmed a data breach this week involving the theft of thousands of developer code repositories. One threat actor — TeamPCP — took credit.

GitHub confirmed today it was breached via an attacker that stole thousands of internal repositories.

TeamPCP, a financially motivated threat actor that has relentlessly targeted the open source ecosystem, yesterday published a post to a prominent Dark Web data breach forum that it would sell internal source code and organization data stolen from GitHub. This totaled "~4,000 repos of private code," according to the advertisement, and was for sale to an interested buyer. More here

Similar Stories

The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk. More...

The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions sho… More...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potentia… More...

A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, … More...

The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its c… More...

Have your say

 

News Categories

The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk. More...

The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions sho… More...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potentia… More...

A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, … More...

The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its c… More...

image

Contact Us

Security Interest Group Switzerland
c/o Bridge Head AG
Sulzbergstrasse 34
5430 Wettingen
Switzerland

Follow Us

This website is powered by
ToucanTech