As per Meta, cyberattackers stole code and personal data of 1,500 individuals. This is because malicious actors gained access to some of the organization’s GitHub repositories. The unauthorized access was found a few weeks ago. An external group utilized an employee’s stolen credentials to get access.

As per Meta, 99% of the stolen data was software code related to certain Meta products. Only 1% was personal data. The organization said that a major part of the personal data was in fact synthetic or anonymized test data. Hence the attackers would find it difficult to determine the real data.

A Meta spokesperson stated “This was not a vulnerability in any Meta product, and Meta’s internal systems were not breached. Meta business data held in a GitHub repository was improperly accessed using an employee’s stolen credentials – this included a small amount of personal data for a limited number of people, most of whom were Meta employees,”

The spokesperson added “We’ve since rotated secrets found in the repositories, implemented new controls to prevent user data from being stored in GitHub, and worked with GitHub on additional measures to protect our repositories.”

Meta is informing regulators, and the individuals whose data was involved are being offered credit as well as dark web monitoring services.

SOURCES:-

https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/

https://www.theverge.com/tech/1010737/meta-says-its-github-was-hacked-exposing-1500-peoples-personal-data

https://aiweekly.co/alerts/meta-says-hackers-stole-code-and-personal-data-of-1500-mostly-us-employees-via

https://www.cyberkendra.com/2026/10/meta-github-breach-source-code-1500-employees.html

https://www.internationalcyberdigest.com/meta-github-breach-source-code-employee-data/