Overview
- Meta detected the intrusion a few weeks ago after an outside group used a stolen employee login to access some company GitHub repositories.
- Security teams shut off the attackers’ access, rotated secrets found in the repositories, and worked with GitHub and law enforcement to contain the incident.
- Company reviews show roughly 99% of the exfiltrated files were business code and about 1% were personal or test data, with much of that described as synthetic or anonymized.
- Notifications to roughly 1,500 people, mostly U.S. employees, began Tuesday and those affected are being offered credit and dark‑web monitoring while regulators are being informed.
- Meta’s investigation is ongoing, the attackers have not been publicly identified, and the company is adding proactive scanning and repository controls to prevent future accidental uploads of personal data.