Red Hat confirms security incident after hackers claim GitHub breach

Red Hat confirmed unauthorized access to a self-managed GitLab instance used by its Consulting division after an extortion group calling itself the Crimson Collective claimed to have stolen ~570GB from ~28,000 repositories, including Customer Engagement Reports that may contain sensitive infrastructure details and authentication tokens. The attackers posted directory listings and a CER index naming many high-profile organizations; Red Hat says the issue was isolated to the Consulting GitLab instance, removed unauthorized access, implemented hardening, and is notifying affected customers while investigations continue.