A mishandled GitHub token exposed Mercedes-Benz source code

A publicly posted GitHub token belonging to a Mercedes‑Benz employee granted access to internal GitHub Enterprise repositories, potentially exposing source code, API keys, DB connection strings and other sensitive internal artifacts; RedHunt Labs discovered the token, reported it (with TechCrunch assistance) and Mercedes-Benz revoked the token after being notified, stating limited repository exposure and no evidence of customer data being affected, but no public confirmation of misuse has been provided.