New York Times warns freelancers of GitHub repo data breach - eviltoast
The New York Times notified an undisclosed number of contributors that some of their sensitive personal information was stolen and leaked after its GitHub repositories were breached in January 2024.
  • The New York Times suffered a breach of its GitHub repositories in January 2024, leading to the theft and leak of sensitive personal information of freelancers.
  • Attackers accessed the repos using exposed credentials, but the breach did not impact the newspaper’s internal systems or operations.
  • The stolen data, amounting to 273GB, was leaked on 4chan and included various personal details of contributors as well as information related to assignments and source code, including the viral Wordle game.
    • PlexSheep@infosec.pubEnglish
      3·
      5 months ago

      I self host Forgejo for a pretty long time now. I put my personal stuff there and if something seems like the public might like it I mirror it to GitHub and Codeberg. Forgejo is amazing and will be even more amazing when federation support gets stable.