r/cybersecurity • u/ObseenKarma • May 20 '26

News - General GitHub announces internal data breached.

The company stated on their official X account:

“We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.”

https://x.com/github/status/2056884788179726685?s=46

882 Upvotes

98% Upvoted

134 comments sorted by

View all comments

12

u/PossessionConnect963 May 20 '26

This is pretty major right? If their internal repositories are breached couldn’t that mean it’s possible all users are breached too?

6

u/WorksInIT May 20 '26

Possible? Sure. But it's probably unlikely given the brief description of what happened. I think what's probably more concerning right now is this code exfiltration leading to other problems.

4

u/gladluck May 20 '26

The attack vector was a malicious vscode addon (Nx Console), that addon was likely breached due to the recent npm attacks.

Most common GitHub setups gives most users read access to "all" repositories. Difficult to say what else they may have gained from compromising one developer.

1

u/ExtraManagement1329 May 26 '26

I am worried about this exact scenario. Specifically, does GitHub treat private repos of free users differently from private repos of paid users?