Red Hat Consulting Hit by Major Data Breach, Crimson Collective Claims Access to 28,000 Repositories
Red Hat Consulting has suffered a significant data breach. The Crimson Collective hacker group claims to have accessed and exfiltrated data from over 28,000 internal repositories on Red Hat's GitLab instance, not GitHub as initially reported. The compromised data includes sensitive information from major global organizations.
The breach, which Red Hat is currently investigating, affects a wide range of clients. These include major banks like Citi, JPMC, and HSBC, telecoms such as Verizon and Telefonica, tech giants like Siemens and Bosch, and even the U.S. Senate. The data compromised ranges from customer engagement reports to infrastructure analysis and private repositories.
The Crimson Collective claims to have already gained access to some of Red Hat Consulting's customers' infrastructure. They attempted to contact Red Hat with a ransom demand but received only an automated response. The compromised data includes credentials, CI/CD secrets, pipeline and container registry configurations, VPN profiles, infrastructure blueprints, Ansible playbooks, and OpenShift install blueprints. Red Hat, however, assures that there's no reason to believe this issue has impacted other Red Hat services or products, and the software supply chain remains intact.
Red Hat Consulting is actively working to remediate the breach. Meanwhile, BleepingComputer subscribers can stay informed about the latest developments and other cybersecurity threats through breaking news email alerts. The full extent of the breach and its potential impact on the affected organizations remain under investigation.
Read also:
- Web3 social arcade extends Pixelverse's tap-to-earn feature beyond Telegram to Base and Farcaster platforms.
- Over 5,600 Road Safety Violations Caught in Manchester Trial
- Jaguar Land Rover Resumes Production After Cyberattack, UK Govt & Banks Provide £3.5B Support
- Jaguar Land Rover's Cyberattack Halts Production, Impacting 100,000 Jobs