Meta says its GitHub was hacked, exposing the personal data of 1,500 people, according to The Verge, citing SecurityWeek
According to The Verge (13 October 2026, US time; 14 October, 5:59 am Perth), citing SecurityWeek, Meta says its GitHub was hacked, exposing the personal data of 1,500 people.
The Verge reports, citing SecurityWeek, that Meta says "99% of the data the hackers took was business data, in the form of software code related to some of its products. The remaining 1% was personal data," some of which was "synthetic or anonymized", and that most of that personal data reportedly belonged to Meta employees in the US.
No Australian impact has been stated. Primary: The Verge, citing SecurityWeek.
Correction (25 Oct 2026): the card now rests on The Verge's report; details The Verge does not state (stolen employee credentials, detection timing, Meta's response steps, credit monitoring, regulator notification and notification dates) have been removed, and the card date has moved from 13 to 14 October 2026, the Perth date of The Verge's report (13 October, 21:59 UTC; 14 October, 5:59 am Perth). (source: The Verge)
- Product
- Meta GitHub repositories (software code and some personal data)
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Nothing to patch. For any GitHub organisation: scan repositories for secrets and personal data and remove or rotate anything found.
