• The New York Times suffered a breach of its GitHub repositories in January 2024, leading to the theft and leak of sensitive personal information of freelancers.
  • Attackers accessed the repos using exposed credentials, but the breach did not impact the newspaper’s internal systems or operations.
  • The stolen data, amounting to 273GB, was leaked on 4chan and included various personal details of contributors as well as information related to assignments and source code, including the viral Wordle game.
  • catloaf@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 months ago

    I don’t see what Microsoft has to do with this. The article says the repos were accessed with stolen creds.

    • helenslunch@feddit.nl
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 months ago

      As The Times told BleepingComputer last week, the attackers used exposed credentials to hack into the newspaper’s GitHub repos.

      I don’t know what “exposed credentials” are but if they were accessed with “stolen” creds there would be no “hacking”, just logging in.

      • Dark Arc@social.packetloss.gg
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        edit-2
        3 months ago

        This is “hack” like the kid that guessed your grandma’s Facebook password is “ilovecats1953”, “hacked” Facebook.