How We Got a CISA GitHub Leak Taken Down in Under a Day
GitGuardian Blog - Take Control of Your Secrets Security [Unoff…
May 19, 2026
On May 14, GitGuardian found a public GitHub repository called "Private-CISA" — 844 MB of plain-text passwords, AWS tokens, and Entra ID SAML certificates belonging to CISA, exposed since November 2025. Some credentials were still valid. CISA pulled it offline within 26 hours.
Discussion in the ATmosphere