Meta disclosed that an outside group used stolen employee credentials to access some of the company’s GitHub repositories a few weeks ago. Roughly 99% of the stolen data consisted of business software code, while the remaining 1% involved personal information that had been improperly stored on the platform against company policy. Most of the roughly 1,500 impacted individuals are Meta employees based in the United States, and they are being offered credit and dark web monitoring services. Meta noted that much of the exposed personal data included synthetic or anonymized test data, making it difficult for attackers to distinguish genuine records. In response, Meta revoked compromised credentials, rotated secrets, collaborated with GitHub to tighten access controls, and implemented proactive scanning to prevent future user data uploads.

Full report : Hackers used stolen employee credentials to access Meta’s GitHub repositories, compromising software code and a small amount of personal data belonging to roughly 1,500 individuals.