Now Hacked
EN-GB
Data breach

Claude Code configuration files expose passwords and API keys

First reported · Last reported · 4 related reports

Passwords and API keys were publicly exposed on GitHub through files linked to Claude Code's option to skip confirmation prompts. Initial reports raised concerns about exposure in 1,122 public copies. A subsequent independent investigation by GitGuardian found 31,088 keys in 23,276 public repositories, of which 17% were valid when scanned, and identified a further 613 keys in Docker Hub images.

Key facts

Affected organisation
Being confirmed
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
31,088 keys exposed in 23,276 public repositories; 613 keys also identified in Docker Hub images
Cause / method
Public exposure of passwords and API keys through files linked to Claude Code's option to skip confirmation prompts
Location
Other countries

If your data was exposed

Exposed dataEmailPassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. Concerns were raised about passwords and keys exposed in 1,122 public copies of Claude Code-related files on GitHub.
  2. It emerged that Claude Code's option to skip confirmation prompts could expose passwords and API keys on GitHub.
  3. An independent investigation by GitGuardian found 31,088 keys in 23,276 public repositories, of which 17% were valid when scanned, and identified a further 613 keys in Docker Hub images.

4 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.