Meta says attackers used an employee’s stolen login to copy code from some of its GitHub repositories
About 1,500 people, mostly US employees, are being notified because a small amount of personal data was stored in the code by mistake. Meta says its products were not made vulnerable.
How this story was checked
- ResearchedWith AI assistance · 2 sources
- AI source checkEach sentence matched to its source
- Editor approvalMayank Sahu · 14 Oct, 15:42
- Published14 Oct, 15:42
In short
Meta said on 13 October 2026 that an outside group used an employee’s stolen credentials to access some of its GitHub code repositories. About 1,500 people, mostly US employees, are being notified because some personal data had been stored in the code by mistake.
What Meta disclosed
Meta said an outside group accessed some of its GitHub code repositories using an employee’s stolen login details, SecurityWeek reported on 13 October 2026.1 Meta detected the intrusion “a few weeks ago”, and notifications began going out on 13 October.1
A Meta spokesperson said the repositories were “improperly accessed using an employee’s stolen credentials” and that the incident involved “a small amount of personal data for a limited number of people”.1
What was taken
- Meta says 99% of the data taken was business data, mainly software code for some products, and 1% was personal data.12
- About 1,500 people are being notified, most of them US employees.12
- The personal data had been added to the repositories by mistake, against company policy. Meta has not said what types of personal information were involved.1
- Meta says much of the apparent personal data is synthetic or anonymised test data.12
Meta says its internal systems were not breached and that no Meta product was made vulnerable.1
What Meta did
According to SecurityWeek, Meta shut down the attackers’ access, brought in GitHub and law enforcement, rotated secrets found in the affected code, and added controls and scanning to stop user data being stored in GitHub.1 It is notifying regulators and offering affected people credit and dark-web monitoring.12
Why it matters for AI teams
Code repositories increasingly hold model code, prompts and keys for AI services. A single stolen login can expose them, which is why secret rotation and scanning for stored personal data matter.
What is not known
Who the attackers were and which products’ code was taken. Meta says it does not believe the hackers were specifically after its data.1
Fact ledger
How labels workQuestions readers ask
Was Meta hacked?
Meta says outsiders used an employee’s stolen login to access some GitHub code repositories. It says its internal systems were not breached.
Is my Facebook or Instagram data affected?
Meta says about 1,500 people, mostly US employees, are being notified, and that no Meta product was made vulnerable.
What is Meta offering affected people?
Credit and dark-web monitoring.