{"id":749191,"date":"2026-10-17T13:35:16","date_gmt":"2026-10-17T10:35:16","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/meta-says-hackers-stole-code-and-data-on-1500-people-securityweek-reports\/"},"modified":"2026-10-17T13:35:16","modified_gmt":"2026-10-17T10:35:16","slug":"meta-says-hackers-stole-code-and-data-on-1500-people-securityweek-reports","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/meta-says-hackers-stole-code-and-data-on-1500-people-securityweek-reports\/","title":{"rendered":"Meta says hackers stole code and data on 1,500 people, SecurityWeek reports"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aec9cb29ed72\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6aec9cb29ed72\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/meta-says-hackers-stole-code-and-data-on-1500-people-securityweek-reports\/#What_the_hackers_took\" >What the hackers took<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/meta-says-hackers-stole-code-and-data-on-1500-people-securityweek-reports\/#What_Meta_has_changed\" >What Meta has changed<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/meta-says-hackers-stole-code-and-data-on-1500-people-securityweek-reports\/#Other_recent_breaches\" >Other recent breaches<\/a><\/li><\/ul><\/nav><\/div>\n<p><img decoding=\"async\" src=\"https:\/\/media.thenextweb.com\/2026\/07\/threads-meta-ai-dm-global-rollout.avif\" \/><\/p>\n<div id=\"article-main-content\">\n<blockquote>\n<p>\u201cThis was not a vulnerability in any Meta product, and Meta\u2019s internal systems were not breached,\u201d a Meta spokesperson told SecurityWeek.<\/p>\n<\/blockquote>\n<p>Hackers got into some of Meta\u2019s GitHub repositories and took personal data on about 1,500 people. Most of them are Meta employees in the US, and Meta is now notifying them. Eduard Kovacs reported the breach for <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.securityweek.com\/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach\/\" target=\"_blank\" rel=\"nofollow noopener\">SecurityWeek<\/a> on 13 October.<\/p>\n<p>An outside group got in with an employee\u2019s stolen credentials, Meta told SecurityWeek. Meta detected the intrusion a few weeks ago, cut off the attackers\u2019 access and brought in GitHub and law enforcement. Notifications started going out on Tuesday, 13 October.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_the_hackers_took\"><\/span>What the hackers took<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Business data made up about 99% of what the hackers took, the company said. That data is software code for some of Meta\u2019s products. Personal data made up the other 1%.<\/p>\n<p>That personal data should not have been there. Someone added it to the repositories by mistake, and storing it on GitHub broke company policy. Meta has not said which types of personal information the hackers took.<\/p>\n<p>Meta said that synthetic or anonymised test data made up a significant part of what looked like personal data. That means the attackers may not easily tell real records from test ones. Based on its investigation with GitHub so far, Meta does not believe the hackers were going after its data specifically.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_Meta_has_changed\"><\/span>What Meta has changed<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Meta has rotated secrets it found in the affected repositories and hardened its product security. It is working with its teams that use GitHub to keep user data off the platform. It is also adding proactive scanning to catch any user data that someone uploads by mistake.<\/p>\n<blockquote>\n<p>\u201cWe\u2019ve since rotated secrets found in the repositories, implemented new controls to prevent user data from being stored in GitHub, and worked with GitHub on additional measures to protect our repositories,\u201d the spokesperson said.<\/p>\n<\/blockquote>\n<p>Meta is offering the people affected credit and dark web monitoring, and it is notifying regulators. It has not published a statement on its own <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">news<\/a>room. Its comments so far were made to SecurityWeek, and it has not said who the attackers are.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Other_recent_breaches\"><\/span>Other recent breaches<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>This is not Meta\u2019s first security headline this year. In August, its Muse Spark model hacked a real company during a safety test.<\/p>\n<p>Breaches through third parties keep surfacing elsewhere too. Last month, a DriveWealth breach exposed data on Revolut customers who traded US stocks. Earlier this month, the FBI removed an Accenture contractor after an unpatched system led to a breach.<\/p>\n<\/p><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" target=\"_blank\" >Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/thenextweb.com\/news\/meta-github-breach-code-personal-data-1500\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u201cThis was not a vulnerability in any Meta product, and Meta\u2019s internal systems were not breached,\u201d a Meta spokesperson told SecurityWeek. Hackers got into some of Meta\u2019s GitHub repositories and took personal data on about 1,500 people. Most of them are Meta employees in the US, and Meta is now notifying them. Eduard Kovacs reported&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-749191","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/749191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=749191"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/749191\/revisions"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=749191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=749191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=749191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}