Cyber Security Cloud: suspicious access with a leaked GitHub credential may have exposed customer data

Cyber Security Cloud, Inc. said on 12 November that an outside organization told it one GitHub credential an employee used for work had leaked. Reviewing access logs, it found on 5 November earlier suspicious access that appears to have used that credential. Log coverage is limited, so access over the credential’s whole valid period cannot be checked. [1]

Customer company names, names, email addresses and service traffic data stored on GitHub may have been viewed or taken; who is affected is still being checked. No unauthorized access to its services or secondary harm has been found, and the services run normally. It revoked the credential and reported to the Personal Information Protection Commission and other bodies. [1]