US EditionRed Hat repos raided, claims cybercrew, files stolen
The Crimson Collective claims to have stolen 570GB of sensitive customer data from Red Hat’s GitHub, including detailed infrastructure reports used for extortion attempts.
- Last month, Red Hat confirmed a security incident tied to Red Hat Consulting but declined to verify claims by Crimson Collective, which says it stole nearly 570GB from 28,000 projects.
- The Crimson Collective says it found and used authentication tokens and full database URIs to access downstream customers, claiming the intrusion occurred around two weeks ago and extortion attempts yielded only an automated reply.
- On Telegram the hackers published a directory listing and samples, including about 800 Customer Engagement Reports from 2020–2025 naming clients like Bank of America, T-Mobile, AT&T, Fidelity and Walmart.
- Red Hat mobilized its incident response team and is working with cybersecurity firms and authorities, advising clients to conduct security posture reviews amid warnings CERs risk downstream customers.
- Experts warn the incident could erode trust in cloud-based repository services, heightening scrutiny on Red Hat's OpenShift AI flaw and sparking debate on security standards for open-source development.
12 Articles
12 Articles
Hackers claim to have plundered Red Hat’s GitHub repos - Cybernoz - Cybersecurity News
The Crimson Collective, an emerging extortion / hacker group, has made a bombshell claim on their Telegram channel: they have gained access to Red Hat’s GitHub and have exfiltrated data from over 28,000 internal repositories connected to the company’s consulting business. What data was allegedly compromised? Red Hat is the U.S.-based open-source enterprise software company known for providing Linux, cloud, container, and automation platforms for…
Red Hat Confirms 570GB Data Breach by Crimson Collective Hackers
In a significant blow to one of the tech industry’s stalwarts, Red Hat has confirmed a security incident involving unauthorized access to its systems, following claims by a hacker group that it breached the company’s private GitHub repositories. The extortion group, dubbing itself the Crimson Collective, asserted it had stolen nearly 570 gigabytes of compressed data from approximately 28,000 internal projects. This revelation has sent ripples th…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
