Security vendor Cyber Security Cloud: leaked employee GitHub credential abused, some customer data may be exposed

Japan's Cyber Security Cloud says a tip from an external organization revealed that one employee's work GitHub credential had leaked, and on Nov 5 access logs showed suspicious past access apparently by a third party using it ^[1]. The company says some customer information stored on GitHub (company names, names, email addresses, etc.) and service-related communication data may have been viewed or taken, while no unauthorized access to its services or secondary damage has been found and services continue normally ^[1]. What to do now: the company will notify customers confirmed to be affected and work with clients on notifications for personal data it processes on their behalf, so customers should watch for individual notices ^[1].

Industries mainly affected: Technology

1. Watch for individual notices from Cyber Security Cloud to affected customers ^[1].
2. If your organization entrusts personal data to the company, coordinate with it on notifying data subjects .