In an incident that raises eyebrows about data security, hackers slipped into some of Meta’s GitHub repositories using pilfered employee credentials. They walked off with product source code and a smattering of personal data from around 1,500 individuals, primarily US-based Meta employees. Meta’s timely disclosure to SecurityWeek reveals that the major chunk of the stolen data was business-related, with personal data mistakenly included due to a policy breach. The tech giant is quick to point out that much of this supposedly personal data was actually synthetic or anonymized for testing, offering some relief.
The breach plays out like a classic case of opportunistic cyber mischief rather than a calculated strike at Meta itself. No breach of Meta’s internal systems was detected, indicating a case of unauthorized access rather than a targeted attack on the company’s infrastructure.
Meta’s response involved severing the hackers’ access, working with GitHub and law enforcement, and enhancing security by rotating credentials found within the compromised repositories. The company is reassuring regulators and affected individuals by offering credit and dark web monitoring. As the cyber world watches, Meta reinforces its defenses by tightening security protocols and ramping up efforts to prevent user data from inadvertently sliding into public repositories again.
Read more at International Cyber Digest…