/incidentsfield log

// platform

CircleCI incidents

Indexed Non-Human Identity credential leak incidents that affected CircleCI. Sorted by disclosure date.

1 incident indexed

2023-01-04·CRITICAL8.6·confirmed
CircleCI Session Token Breach (2023)
Malware on a CircleCI engineer's laptop stole a 2FA-backed session token, giving the attacker production access to customer environment variables and any secrets stored in CircleCI.
vector / CI/CD compromiseplatforms / CircleCI, GitHub, AWSread / 3 min