Hackers gained access to Meta's GitHub repositories using stolen credentials from a company collaborator, compromising source code and personal data belonging to approximately 1,500 employees.
According to Meta, 99% of the exposed material consisted of code related to some of the company's products. The remaining 1% contained personal data that was included accidentally, with most of it being synthetic or anonymized. Meta emphasized that their internal systems were not compromised and no vulnerabilities in their products were exploited during the breach.
The incident underscores the importance of securing developer credentials and access tokens, which remain a common entry point for attackers targeting technology companies. While the exposure of source code and employee data is significant, Meta's assertion that production systems remained untouched limits the immediate operational impact, though the breach still raises questions about credential management practices within large organizations.