GitHub Potentially breached
Originally posted by /u/ITSecurityAdam on /r/sysadmin:
GitHub Official X Post
"We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity."
Dark Web Informer says "GitHub source code allegedly offered for sale: Internal orgs and private repositories claimed
A threat actor using the alias TeamPCP claims to be selling GitHub source code and internal organization data.
The actor claims the dataset includes around 4,000 private repositories and says samples can be provided to interested buyers to verify authenticity.
━━━━━━━━━━━━━━━━━━━━ Target: GitHub Country: United States Sector: Technology / Software Development / Source Code Incident Type: Alleged Source Code Sale Claimed Exposure: Around 4,000 private repositories Actor: TeamPCP Price: Offers over $50,000 ━━━━━━━━━━━━━━━━━━━━"
Edit: adding xcancel link, thanks jykke! https://xcancel.com/github/status/2056884788179726685
EDIT: adding screenshot of Breached forum: https://preview.redd.it/ejqauffg382h1.jpeg?width=1034&format=pjpg&auto=webp&s=3411db1a4516b9153267fcc043ddf09a3e73f2c3
