Optimeyes data leak (Research)

Optimeyes inadvertently exposed a Jenkins instance whose build metadata contained links with embedded Bitbucket credentials. An attacker discovered the credentials and leaked numerous sensitive assets online, including git repos and credentials, configuration files with secrets, S3 bucket contents (customer network inventories and vulnerability scans), proprietary ML models, database backups, and SFTP private keys.