Developers at over 300 organizations customer data exposed after GitHub Glow breach
Data Leak
Summary
Hide ▲
Show ▼
A public GitHub exposure revealed 13,000+ internal images from developers at 300+ organizations, including customer billing records and unreleased feature screens. The files were posted under developers' personal accounts, making them downloadable outside company-controlled repositories. The leak spreads sensitive internal visuals across many organizations and raises the risk of further public circulation.
Related Happenings
Public GitHub repositories valid credential exposure
Data Leak
H score55
First: 30.09.2026 21:08
Last: 30.09.2026 21:08
Sources 1
About this happening:
More than 543,699 credentials exposed in public GitHub repositories were still valid in July, leaving a large pool of reusable secrets accessible to anyone who found t...
Public GitHub repositories valid credential exposure
Data LeakAbout this happening: More than 543,699 credentials exposed in public GitHub repositories were still valid in July, leaving a large pool of reusable secrets accessible to anyone who found t...
Review gates for coding agents block public uploads and personal-account posting
Defensive Guidance
H score24
First: 30.09.2026 14:30
Last: 30.09.2026 14:30
Sources 1
How related:
Require a review step before an agent creates a public repository, pushes to a personal account or gist, or makes a private repository public.
About this happening:
Companies using coding agents were urged to add review gates and access controls before agents can create public repositories, post to personal accounts or gists, or m...
Review gates for coding agents block public uploads and personal-account posting
Defensive GuidanceHow related: Require a review step before an agent creates a public repository, pushes to a personal account or gist, or makes a private repository public.
About this happening: Companies using coding agents were urged to add review gates and access controls before agents can create public repositories, post to personal accounts or gists, or m...
TeamPCP supply-chain credential and data leak
Data Leak
H score59
First: 27.08.2026 16:31
Last: 27.08.2026 16:31
Sources 1
About this happening:
A TeamPCP-linked supply-chain leak exposed half a million credentials and at least 300GB of data, putting over a thousand organizations worldwide at risk of downstream...
TeamPCP supply-chain credential and data leak
Data LeakAbout this happening: A TeamPCP-linked supply-chain leak exposed half a million credentials and at least 300GB of data, putting over a thousand organizations worldwide at risk of downstream...
Miasma source code leak on GitHub
Data Leak
H score32
First: 10.06.2026 23:27
Last: 10.06.2026 23:27
Sources 1
About this happening:
The Miasma source code was briefly leaked on GitHub, exposing malware framework code that could be copied, studied, and modified by other threat actors. The exposure repor...
Miasma source code leak on GitHub
Data LeakAbout this happening: The Miasma source code was briefly leaked on GitHub, exposing malware framework code that could be copied, studied, and modified by other threat actors. The exposure repor...
Shai-Hulud public GitHub repository credential exposure
Data Leak
H score26
First: 18.05.2026 20:28
Last: 18.05.2026 20:28
Sources 1
About this happening:
Shai-Hulud stole developer credentials that were later exposed in public GitHub repositories, turning a theft phase into a public leak of access data. The exposed mate...
Shai-Hulud public GitHub repository credential exposure
Data LeakAbout this happening: Shai-Hulud stole developer credentials that were later exposed in public GitHub repositories, turning a theft phase into a public leak of access data. The exposed mate...
Timeline
-
30.09.2026 14:30 2 articles · 13d ago
Developers at over 300 organizations customer data exposed after GitHub Glow breach
Initial DisclosureDevelopers asked AI coding agents to package screenshots for review, and the agents placed the files in public GitHub repositories under personal accounts. That first step exposed internal visuals outside company-controlled access.
Show sources
- AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub — thehackernews.com — 30.09.2026 14:30
- AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub — thehackernews.com — 30.09.2026 14:30