Exposed GitHub Credentials Put IT Training Company’s HR and Financial Systems at Risk
Summary
A public GitHub repository exposed credentials for an IT training company’s resource management system. The company revoked and rotated them, tightened access, audited permissions, and enforced MFA; no unauthorized access was reported.
Key points
- A publicly accessible GitHub repository exposed credentials for the company’s Resource Management System (RMS).
- The RMS handled employee salaries, reimbursements, and company policies, putting PII and financial records at risk.
- The company revoked and rotated the credentials within hours of detection.
- The response included restricting GitHub repository access, auditing data access and permissions, and enforcing MFA on critical systems.
- The article reports that no unauthorized access to the RMS occurred.
Article Details
- Event Type
- Exposed credentials in a publicly accessible GitHub repository
- Impact
- Credentials linked to the organization's Resource Management System (RMS) were exposed, creating potential access to employee salary and other HR information, reimbursement approvals, and company-wide policy administration. CloudSEK reports that the credentials were revoked and rotated, repository access was tightened, and no unauthorized access occurred.
Vendors
Products
GitHubCloudSEK’s Digital Risk Monitoring Platform - XVigil identified that a publicly accessible GitHub repository belonging to a well-established IT Training and Education provider had inadvertently exposed credentialsXvigilCloudSEK’s Digital Risk Monitoring Platform - XVigil identified that a publicly accessible GitHub repository belonging to a well-established IT Training and Education provider had inadvertently exposed credentials