SailPoint Discloses Unauthorized Access to GitHub Repositories

· Original article ↗

Summary

SailPoint says unauthorized access to some GitHub repositories on April 20, 2026, was contained. The company attributed the access to a third-party application vulnerability and said its investigation found no evidence that production or staging customer data was Access

Key points

  • SailPoint reported unauthorized access to a subset of its GitHub repositories on April 20, 2026.
  • The company said it quickly terminated the activity and addressed a vulnerability in a third-party application that enabled the access.
  • An investigation with a third-party cybersecurity firm found no evidence that customer data in production or staging environments was accessed or that services were interrupted.
  • SailPoint notified customers whose information was stored in the accessed repositories and said no additional action was required.
  • The company has not specified what data may have been in the repositories or identified the threat actor; a connection to TeamPCP attacks is unclear.

Article Details

Victim Organization
SailPoint
Incident Type
Unauthorized access to a subset of GitHub repositories through a vulnerability in a third-party application
Incident Date
2026-04-20
Operational Impact
SailPoint said it contained the incident and resolved the issue. Its investigation found no evidence that customer data in production or staging environments was accessed or that services were interrupted. Customers were notified if their information was stored in the accessed repositories.
Claim Status
confirmed

Threat Actors

Vendors

Products

Industries

Related Articles