Meta told SecurityWeek that an outside group used a Meta employee's stolen credentials to access some company GitHub repositories. About 99% of what was taken was business/source code; ~1% was personal data stored against policy (some synthetic/anonymized test data). Roughly 1,500 people — mostly U.S. Meta employees — are being notified. Meta says no Meta product vulnerability and internal systems were not breached; secrets were rotated and new controls added to keep user data out of GitHub. Law enforcement and GitHub were engaged.