Lapsus$ Claims to Have GitHub Internal Data, Threatens Free Leak
Summary
Lapsus$ claims it has data from GitHub Internal and says it may leak the data for free if no buyer is found. The claim, monitored by ransomware[.]live, is unverified.
Key points
- The monitoring record names GitHub Internal in the United States as the claimed victim and Lapsus$ as the actor.
- Lapsus$ claims the data contains material related to GitHub's main platform.
- The group says it is not seeking a ransom and may leak the data for free if no buyer is found.
- The record is attributed to ransomware[.]live; the claim is unconfirmed, and the article says it cannot verify its accuracy.
Article Details
- Victim
- GITHUB INTERNAL
- Claim Date
- 2026-06-13
- Encryption Status
- Unknown; the article does not report whether data was encrypted.
- Exfiltration Status
- Unverified group claim; exfiltration is not confirmed.
- Exfiltrated Data
- The group claimed that “everything for the main platform is there,” without specifying the data or confirming exfiltration.
- Ransom Demand
- No ransom was requested, according to the article.
- Leak Status
- The group threatened to leak data for free if no buyer is found; publication is not reported.