Meta is notifying about 1,500 people, mostly US employees, that their personal data was exposed after hackers used a staff member’s stolen credentials to get into some of its GitHub repositories, according to Eduard Kovacs at SecurityWeek. Meta said 99% of what the hackers took was code for some of its products, and the other 1% was personal data that had been put on GitHub by mistake in violation of company policy. Meta hasn’t said what kinds of personal data were involved, but it said much of what looked real was fake or anonymized records used for testing. Meta is offering affected people monitoring of their credit and the dark web, and it’s adding scans to keep personal data off GitHub going forward.
