Meta says hackers stole code and data on 1,500 people via GitHub

Hackers accessed Meta's GitHub repositories using a stolen employee credential and took personal data on about 1,500 people, mostly US employees. About 99% of the stolen data was product source code, while personal data made up 1% and was stored there by mistake. Meta cut off access, involved GitHub and law enforcement, and is notifying those affected.

• Breach affected about 1,500 people, mostly US Meta employees
• 99% of stolen data was product code, 1% personal data
• Attackers used a stolen employee credential to get in
• Meta rotated secrets and added scanning to keep user data off GitHub