WORLDTECHMeta Says Attackers Stole Code and Personal Data of About 1,500 Via GitHub
Meta says an outside group broke into its GitHub repositories and took software code along with personal data tied to about 1,500 people. The company has started notifying those affected, according to a report by SecurityWeek.
Stolen credentials gave access to repositories
Meta says the intrusion was detected a few weeks ago and that its security team cut off the attackers' access, bringing in GitHub and law enforcement. According to the company, the group got in by using an employee's stolen credentials.
Meta told SecurityWeek that 99% of the data taken was business data, namely software code linked to some of its products.
Personal data stored against policy
Meta says the personal data had been added to the repositories by mistake, and that keeping it on GitHub broke company policy. Most of the affected people are Meta employees in the United States, who are being offered credit monitoring services. Notifications began going out on Tuesday.
Open questions
- Which types of personal information were involved?
- Could the stolen test data be told apart from genuine records?
Sources & evidence
- SecurityWeek Reporting source
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach ↗
https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/