Acuity confirms hackers stole non-sensitive govt data from GitHub repos

Acuity, a U.S. federal contractor, reported a cybersecurity incident in which attackers exploited a vulnerability in a Tekton CI/CD server to obtain GitHub credentials and access private repositories; threat actors IntelBroker and Sangierro have since leaked thousands of records allegedly containing data tied to U.S. government agencies and claim some Five Eyes documents. Acuity and a third-party investigator report no evidence of client-sensitive data impact so far, while the U.S. State Department is investigating the alleged theft.