top of page
a desk with a laptop and cup of coffee on it

Insights

Slack Security Incident

Slack reported suspicious activity on its GitHub account. A limited number of employee tokens were stolen and used to access the company's GitHub repository. No customer data or means to access it were found in the downloaded repositories.

Business communication platform Slack reported suspicious activity on its GitHub account in the lead up to the new year. Slack discovered that a limited number of employee tokens were stolen and used to access the company's GitHub repository. The threat actor downloaded private code repositories on December 27. Slack confirmed that none of the downloaded repositories contained customer data, means to access customer data, or the company's primary codebase.

bottom of page