---
title: "Meta says attackers used an employee’s stolen login to copy code from some of its GitHub repositories"
url: https://anawords.com/story/meta-github-breach-stolen-credentials-1500-notified
published: 2026-10-14T15:42:09+05:30
updated: 2026-10-14T15:42:09+05:30
section: Safety & Trust
author: Mayank Sahu
checked: sources checked by AI, approved by editor
version: 1
---

# Meta says attackers used an employee’s stolen login to copy code from some of its GitHub repositories

About 1,500 people, mostly US employees, are being notified because a small amount of personal data was stored in the code by mistake. Meta says its products were not made vulnerable.

**In short:** Meta said on 13 October 2026 that an outside group used an employee’s stolen credentials to access some of its GitHub code repositories. About 1,500 people, mostly US employees, are being notified because some personal data had been stored in the code by mistake.

## What Meta disclosed

Meta said an outside group accessed some of its GitHub code repositories using an employee’s stolen login details, SecurityWeek reported on 13 October 2026.[^1] Meta detected the intrusion “a few weeks ago”, and notifications began going out on 13 October.[^1]

A Meta spokesperson said the repositories were “improperly accessed using an employee’s stolen credentials” and that the incident involved “a small amount of personal data for a limited number of people”.[^1]

## What was taken

- Meta says 99% of the data taken was business data, mainly software code for some products, and 1% was personal data.[^1][^2]
- About 1,500 people are being notified, most of them US employees.[^1][^2]
- The personal data had been added to the repositories by mistake, against company policy. Meta has not said what types of personal information were involved.[^1]
- Meta says much of the apparent personal data is synthetic or anonymised test data.[^1][^2]

Meta says its internal systems were not breached and that no Meta product was made vulnerable.[^1]

## What Meta did

According to SecurityWeek, Meta shut down the attackers’ access, brought in GitHub and law enforcement, rotated secrets found in the affected code, and added controls and scanning to stop user data being stored in GitHub.[^1] It is notifying regulators and offering affected people credit and dark-web monitoring.[^1][^2]

## Why it matters for AI teams

Code repositories increasingly hold model code, prompts and keys for AI services. A single stolen login can expose them, which is why secret rotation and scanning for stored personal data matter.

## What is not known

Who the attackers were and which products’ code was taken. Meta says it does not believe the hackers were specifically after its data.[^1]

## Fact ledger

- [Reported] Attackers used an employee’s stolen credentials to access some Meta GitHub repositories. (source 1,2)
- [Reported] About 1,500 people, mostly US employees, are being notified. (source 1,2)
- [Company claim] 99% of the data taken was code; 1% was personal data. (source 1,2)
- [Company claim] Meta says no product was made vulnerable. (source 1)
- [Not known] Who the attackers were.

## Sources

1. [SecurityWeek: Meta says hackers took code, personal data of 1,500 in GitHub breach](https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/)
2. [AI Weekly: Meta says hackers stole code and personal data of 1,500 employees](https://aiweekly.co/alerts/meta-says-hackers-stole-code-and-personal-data-of-1500-mostly-us-employees-via)