CAMPFIRE: unauthorized access to its GitHub account

CAMPFIRE detected and disclosed unauthorized GitHub access on April 3. Its June 2 investigation traced the attack to an employee's GitHub credentials accidentally uploaded to a personal development server, enabling intrusion into an internal business cloud. Potentially exposed users remained 225,846 after deduplication: 108,784 owner, 118,010 backer, 1,282 partner and 10,521 unclassified bank-detail records, with overlap between categories. Separately, 413 developer name/email records were accessible. No transfer of personal-data files was found, but missing logs prevented ruling out viewing. Card information was excluded. The service platform ran separately, with no misuse or alteration found. Initial containment and authentication/monitoring improvements were completed.