logo

New York Times source code stolen using exposed GitHub token

ID: 84505267-7bef-55ee-b11c-b17c0decfc4b

STIX ID: report--84505267-7bef-55ee-b11c-b17c0decfc4b

Feed Name: Bleeping Computer

Threat Score
72/100

Date Published: 2024-06-08

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

An anonymous actor posted a torrent on 4chan containing roughly 270–273GB of stolen internal source code and data from The New York Times’ GitHub repositories—listing about 6,223 folders and millions of files—claiming access via an exposed GitHub token; The Times confirmed the January 2024 breach of a cloud-based third-party code platform and said there is no indication Times-owned systems were accessed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.