Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

Checkmarx disclosed GitHub repository data posted on dark web after March 2026 supply chain attack.

• •No customer production data affected; GitHub repository is maintained separately
• •LAPSUS$ group claimed breach: source code, employee database, API keys, credentials
• •Company secured repository; forensic investigation ongoing to verify scope
• •Previous Trivy attack compromised GitHub Actions and VS Code extensions with credential stealer

This summary was automatically generated by AI based on the original article and may not be fully accurate.