Red Hat confirms security incident after hackers breach GitLab instance

Red Hat confirmed unauthorized access to a self-managed GitLab instance used by its Consulting division after an extortion group claiming the name Crimson Collective said it exfiltrated ~570GB from ~28,000 repositories including approximately 800 consulting engagement reports (CERs) that may contain sensitive configuration details and authentication tokens for many high-profile customers; the group published directory listings and attempted extortion. Red Hat says the issue is isolated to the consulting GitLab instance, has removed access, implemented additional hardening, is contacting affected customers, and continues its investigation.