SailPoint Discloses Unauthorized Access to GitHub Repositories

Summary
SailPoint says unauthorized access to some GitHub repositories on April 20, 2026, was contained. The company attributed the access to a third-party application vulnerability and said its investigation found no evidence that production or staging customer data was Access
Key points
- SailPoint reported unauthorized access to a subset of its GitHub repositories on April 20, 2026.
- The company said it quickly terminated the activity and addressed a vulnerability in a third-party application that enabled the access.
- An investigation with a third-party cybersecurity firm found no evidence that customer data in production or staging environments was accessed or that services were interrupted.
- SailPoint notified customers whose information was stored in the accessed repositories and said no additional action was required.
- The company has not specified what data may have been in the repositories or identified the threat actor; a connection to TeamPCP attacks is unclear.
Article Details
- Victim Organization
- SailPoint
- Incident Type
- Unauthorized access to a subset of GitHub repositories through a vulnerability in a third-party application
- Incident Date
- 2026-04-20
- Operational Impact
- SailPoint said it contained the incident and resolved the issue. Its investigation found no evidence that customer data in production or staging environments was accessed or that services were interrupted. Customers were notified if their information was stored in the accessed repositories.
- Claim Status
- confirmed
