GitHub Copilot Chat flaw leaks private repository data
A flaw in GitHub Copilot Chat leaked data from private repositories. The scale of the leak, the date it occurred and specific response measures have not been confirmed.
Key facts
- Affected organization
- GitHub
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Private repository data
- Cause / method
- Flaw in GitHub Copilot Chat
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- It became known that a flaw in GitHub Copilot Chat had leaked private repository data.
1 related reports
Other incidents at GitHub
Hijacked GitHub accounts used to run data-stealing code in 1,806 repositories
Impact: 4,837 accounts abused, 61,764 repositories scanned, and data-stealing code executed in at least 1,806 repositories
In the wfx-loot attack observed since November 10, 4,837 hijacked GitHub accounts were used to scan 61,764 repositories. The attackers ran credential-stealing code in at least 1,806 repositories, collecting keys for cloud, development and AI services through GitHub Actions, npm installation scripts and other means. The initial account compromise vector for the overall campaign has not been established.
Related reports: 7 · last report →Malicious extension infection leads to theft of 3,800 GitHub internal repositories
Impact: Data from 3,800 internal repositories
GitHub confirmed that data from 3,800 internal repositories was stolen in a breach carried out through a malicious Visual Studio Code extension. The infection occurred through an internal employee's device, and GitHub said customer data was not affected. TeamPCP, which claimed the attack, later took bids for the stolen data.
Related reports: 15 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.