CISA contractor exposed GovCloud credentials in public GitHub repo
A public GitHub repository named "Private-CISA," apparently maintained by a CISA contractor, contained 844MB of plaintext passwords, SSH keys, tokens, and internal documents since at least Nov. 13, 2025. GitGuardian researcher Guillaume Valadon discovered the repo May 14 and reported that some credentials provided high-privilege access to Amazon Web Services GovCloud and internal CISA systems; reporters confirmed a researcher was able to use keys to access multiple GovCloud accounts. CISA and the contractor have not publicly confirmed details, and congressional Democrats are demanding answers.