CISA passwords and cloud keys exposed
Passwords and cloud keys belonging to the US Cybersecurity and Infrastructure Security Agency were exposed on the public web via GitHub and other channels. The exposed material included Amazon Web Services GovCloud keys. The leaked material was taken down, and members of the US Congress demanded explanations and answers from the agency.
Key facts
- Affected organisation
- Cybersecurity and Infrastructure Security Agency (CISA)
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Exposure of passwords and cloud keys including Amazon Web Services GovCloud keys
- Cause / method
- Public exposure of credentials via GitHub
- Location
- United States
If your data was exposed
Exposed dataPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
Timeline
- It came to light that CISA's Amazon Web Services GovCloud keys had been exposed on GitHub.
- The widespread exposure of passwords and cloud keys and the takedown of the leaked material on GitHub came to light.
- Democratic members of the House Homeland Security Committee demanded an explanation from the agency.
- The agency moved to contain the leak as lawmakers demanded answers about the incident.
10 related reports
- CISA Admin Leaked AWS GovCloud Keys on Github
- US cyber agency CISA exposed reams of passwords and cloud keys to the open web
- How We Got a CISA GitHub Leak Taken Down in Under a Day
- CISA contractor apparently leaked 'highly sensitive' government AWS keys on Github
- House Homeland Dems request CISA briefing amid report of leaked agency credentials
- Senator urges classified briefing after CISA data leak on GitHub
- Lawmakers Demand Answers as CISA Tries to Contain Data Leak
- Root Access: Behind the scenes of the CISA GitHub leak with security researcher Philippe Caturegli
- CISA Shares Lessons Learned from Own Data Breach
- What we can learn from CISA’s GitHub security breach
Other incidents at Cybersecurity and Infrastructure Security Agency (CISA)
CISA breach may have exposed chemical facility security data
Impact: Possible exposure of chemical facility security assessments, security plans and personal information
In January 2024, web shells were installed on Ivanti devices at the US Cybersecurity and Infrastructure Security Agency, compromising the environment of CSAT, its chemical facility security assessment tool. It was suggested that sensitive information such as chemical facility security assessments and security plans, as well as personal information, may have been accessed. Authorities notified chemical facilities of the possible theft of information.
Related reports: 5 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.