Cybersecurity Cloud: Customer Information Leak from GitHub? 'Taking it Seriously as a Security Company' – ITmedia NEWS

Cybersecurity Cloud, which provides enterprise security services such as WAF (Web Application Firewall), announced on November 12 that there were suspicious accesses to its managed area on GitHub, raising concerns about the potential leakage of personal information it had stored.

It confirmed through information provided by an external entity that one piece of GitHub authentication information used by employees in their work had been leaked. It also stated that there were suspicious accesses attributed to a third party using this authentication information.

The potential leakage includes the company names, names, and email addresses of some customers, as well as communication-related information associated with service usage. The scope of the affected personal information is under investigation.

It confirmed on November 5 that there had been suspicious accesses in the past after checking GitHub access logs based on information provided by an external entity. However, there are limitations in the period for which logs can be checked and the content recorded, so the full access situation during the period when the authentication information was valid could not be confirmed.

As a measure, it has invalidated the leaked GitHub authentication information and checked and modified other authentication information for services stored on GitHub. It has also reviewed related authentication information and access permissions, and isolated and suspended the accounts of the affected development devices. Currently, internal security engineers and external specialists are conducting forensic investigations.

It will provide guidance to customers who have a potential risk of information leakage. For personal information entrusted to the company by customers, it will proceed with notifications to the individuals in coordination with the entrusting parties.

It has not confirmed any unauthorized access or malicious operations on its services due to this incident, nor any secondary damage. There is no impact on service provision or security functions, and each service is being provided as usual.

The impact on performance is under review. The company stated, "As a company providing security services, we take this incident seriously and are committed to taking measures across the entire company to prevent recurrence and restore trust."