Lapsus$ Claims Checkmarx Breach and Theft of Source Code and Credentials
Summary
A ransomware.live-monitored post attributes an unconfirmed claim to lapsus$ alleging that CHECKMARX data, including source code, an employee database, API keys, and database credentials, was exfiltrated.
Key points
- The post attributes an unconfirmed breach claim involving CHECKMARX to lapsus$.
- The claim alleges exfiltration of source code and an employee database.
- It also alleges theft of API keys and MongoDB/MySQL credentials.
- The post lists April 24, 2026, as the publication date and April 25, 2026, as the discovery date.
Article Details
- Victim
- CHECKMARX
- Encryption Status
- Not reported.
- Exfiltration Status
- Claimed by lapsus$; the source says the claim is unconfirmed.
- Exfiltrated Data
- The claim alleges exfiltration of source code and an employee database, and theft of API keys and MongoDB/MySQL credentials.
- Leak Status
- No leak or publication of data is confirmed in the source.