Trellix Discloses Unauthorized Access to Source Code Repository

Summary
Trellix disclosed unauthorized access to part of its source code repository and is investigating with outside forensic experts and law enforcement. The company says it has found no evidence that the code was altered or exploited.
Key points
- Trellix disclosed unauthorized access to a portion of its source code repository.
- The company is investigating with outside forensic experts and has notified law enforcement.
- Trellix says it has found no evidence that the accessed code was altered or that its release or distribution process was affected.
- The company says it has found no evidence that the source code was exploited.
- Trellix had not provided further details on when the access was detected or whether corporate or customer data was stolen.
Article Details
- Victim Organization
- Trellix
- Incident Type
- Unauthorized access to a portion of Trellix's source-code repository
- Data Types Exposed
- Source code (accessed; theft or exfiltration was not confirmed)
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Trellix reported no evidence that its source-code release or distribution process was affected.
- Ransom Or Extortion
- Trellix did not disclose whether the attackers made a ransom demand.
- Claim Status
- confirmed
