On May 14, 2026, GitGuardian found what looked like leaked CISA secrets in a public GitHub repository...

Passwords were stored as plain text in a public GitHub repository.

SSH keys, plaintext passwords, other sensitive data had been up since November 2025.

The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."

On May 14, 2026, GitGuardian found what looked like leaked CISA secrets in a public GitHub repository...