ai-security EN

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

• Source: securityweek.com • Feed: feeds.feedburner.com

Data Breaches

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

By

Eduard Kovacs

|

October 13, 2026 (12:01 PM ET)

Meta

Meta is notifying roughly 1,500 people, most of them employees in the US, that their personal information was impacted after hackers got into some of the company’s GitHub repositories.

The intrusion was detected a few weeks ago. According to the tech giant, an outside group gained access to the repositories using an employee’s stolen credentials.

Meta’s security team shut down the attackers’ access and brought in GitHub and law enforcement. Notifications to the impacted individuals started going out on Tuesday.

Meta told SecurityWeek that 99% of the data the hackers took was business data, in the form of software code related to some of its products. The remaining 1% was personal data.

That personal data had been added to the repositories by mistake and should not have been there, as storing it on GitHub went against company policy. Meta has not said what types of personal information were involved.

The company also noted that a significant portion of what looked like personal data was actually synthetic or anonymized test data. As a result, the attackers may not readily be able to tell genuine records apart from test data.

Advertisement. Scroll to continue reading.

Based on its investigation with GitHub so far, Meta does not believe the hackers were specifically after its data.

Meta is also notifying regulators, and the people whose information was involved are being offered credit and dark web monitoring services.

“This was not a vulnerability in any Meta product, and Meta’s internal systems were not breached. Meta business data held in a GitHub repository was improperly accessed using an employee’s stolen credentials – this included a small amount of personal data for a limited number of people, most of whom were Meta employees,” a Meta spokesperson told SecurityWeek .

In response to the incident, Meta rotated secrets it found in the affected repositories. It also hardened its product security to address risks stemming from access to its business data.

The company is working with its teams that use GitHub to keep user data off the platform. As a second line of defense, it is adding controls for proactive scanning to detect any user data uploaded by mistake.

“We’ve since rotated secrets found in the repositories, implemented new controls to prevent user data from being stored in GitHub, and worked with GitHub on additional measures to protect our repositories,” the spokesperson said.

Related : Cyberattack Prompts Ahold Delhaize to Disconnect Systems

Related : Refrigeration Controller Hack Spoils Food Across European Supermarkets

Related : iRhythm Data Breach Impacts at Least 360,000 People

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

Written By

Eduard Kovacs

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

More from Eduard Kovacs

Latest News

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

iRhythm Data Breach Impacts at Least 360,000 People

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems

Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Adobe Patches 176 Vulnerabilities Across 11 Products

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

## Webinar: The AI Access Risk Already in Your Google Workspace

October 19, 2026

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

## Virtual Event: Zero Trust & Identity Strategies Summit 2026

October 14, 2026

Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

Register

People on the Move

Adam Zolle has joined Nike as CISO.

Jeff Hackett has been appointed CFO at internet intelligence provider Censys.

Accenture Federal Services has named Nathaniel Parker as CISO.

More People On The Move

Expert Insights

## AI Has Changed Attack Speed, Not Security Fundamentals

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. (Joshua Goldfarb)

## Four Cyber Threats Harboring Big Plans for the Future

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

  • AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. (Steve Durbin)

## Begin at the End: How to Enable Agentic Remediation

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. (Nadir Izrael)

## “We Think the Security Control Is Working” Is No Longer Good Enough

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar)

## This Key Will Self-Destruct: An Open Standard for Revocable API Keys

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach illustration

Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default. (Matt Honea)

SecurityWeek

Security Community

Stay Intouch

About SecurityWeek

News Tips

Got a confidential news tip? We want to hear from you.

Submit Tip

Advertising

Reach a large audience of enterprise cybersecurity professionals

Contact Us

Daily Briefing Newsletter

Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.