Ranking member Rep. Bennie Thompson (D-MS) speaks during a House Homeland Security Committee hearing on Capitol Hill on March 25, 2026 in Washington, DC.
Andrew Harnik/Getty Images
By
David DiMolfetta,Cybersecurity Reporter, Nextgov/FCW
By
Independent journalist Brian Krebs reported Monday that researchers found a publicly accessible GitHub repository connected to a government contractor that exposed CISA data.
Ranking member Rep. Bennie Thompson (D-MS) speaks during a House Homeland Security Committee hearing on Capitol Hill on March 25, 2026 in Washington, DC.
Andrew Harnik/Getty Images
By
David DiMolfetta,Cybersecurity Reporter, Nextgov/FCW
By

Reported exposure of federal cybersecurity agency login data prompts Hill scrutiny

Senator requests "urgent" classified briefing on CISA's internal credential leaks

Secret CISA credentials found in public GitHub repo

US cyber agency CISA exposed reams of passwords and cloud keys to the open web | TechCrunch

CISA Exposes Secrets, Credentials in 'Private' Repo

‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub

Incidente colossale: fuga di chiavi digitali colpisce CISA, agenzia cybersecurity

America's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens – and incredibly obvious filenames

America's top cyber-defense agency left a GitHub repo open with passwords, keys, tokens – and incredibly obvious filenames

How We Got a CISA GitHub Leak Taken Down in Under a Day

Lawmakers are seeking a briefing from the Cybersecurity and Infrastructure Security Agency after reports that a contractor-linked…

Researchers uncovered an exposed GitHub repository that included internal credentials and files.

SSH keys, plaintext passwords, other sensitive data had been up since November 2025.

The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report…

The House Homeland Security Committee was briefed on Anthropic's Mythos as officials and executives weigh how frontier systems…

The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."