Meta
LowConfirmedDigital services
On 13 October 2026, Meta stated that attackers had accessed several code repositories hosted on GitHub using an employee's stolen credentials. The intrusion had been detected several weeks earlier. According to the company, 99% of the copied data is source code; the remainder includes personal data of about 1,500 people, mostly US-based Meta employees, which had been placed in these repositories by mistake, against internal policy. The exact nature of this data was not specified, and Meta says a significant share consists of synthetic or anonymised test data. Meta states that its internal systems were not compromised.
As the nature of the personal data has not been specified, the exact exposure for the people concerned remains undetermined.
- Disclosed on
- October 13, 2026
- Accounts affected
- 1,500
- Sector
- Digital services
- Country
- United States
- Cause
- Credential stuffing
Exposed data
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Meta confirme une cyberattaque : du code source volé et 1 500 employés exposésCyberattaque.org
- Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub BreachSecurityWeek
- Meta Security Breach Exposes Corporate Code, Employee Data on GitHubSecurity Boulevard
- Meta GitHub Breach: Hackers Steal Code, Data of 1,500Cyber Kendra
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact