● Covered by 1 source · 1 reportMedium impact1 neutral
Meta Reports GitHub Breach Affecting 1,500 Individuals, Mostly Employees
Key points
- Hackers accessed Meta's GitHub repositories via stolen employee credentials.
- Approximately 1,500 individuals, mostly Meta employees, were impacted.
- Breached data included business code and 1% personal data stored by mistake.
- Meta rotated secrets, hardened product security, and added scanning controls.
GitHub Repositories Compromised
Meta detected an intrusion into some of its GitHub repositories a few weeks ago. An external group gained access using an employee's stolen credentials. Meta's security team shut down the access and involved GitHub and law enforcement.
Data Accessed and Impacted Individuals
Roughly 1,500 people, predominantly Meta employees in the US, are being notified about the incident. Meta stated that 99% of the accessed data was business-related software code, with the remaining 1% being personal data. This personal data was mistakenly stored in the repositories, violating company policy.
Nature of Personal Data
Meta has not specified the types of personal information involved. The company noted that a significant portion of what appeared to be personal data was synthetic or anonymized test data, which may make it difficult for attackers to distinguish genuine records. Meta does not believe the hackers specifically targeted its data.
Response and Remediation
Meta is notifying regulators and offering credit and dark web monitoring services to affected individuals. In response to the breach, Meta rotated secrets found in the compromised repositories and hardened its product security. The company is also working to prevent user data storage on GitHub and implementing proactive scanning controls to detect accidental uploads.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Meta is notifying approximately 1,500 individuals, primarily US employees, that their personal and business data was accessed after hackers compromised some of the company's GitHub repositories using stolen employee credentials. The breach involved software code and a small amount of personal data mistakenly stored on GitHub, prompting Meta to implement new controls and security measures.