CISA improvised its incident response during a live breach, agency confirms
A CISA contractor employee uploaded exposed passwords to a public GitHub repository, triggering a response the agency had no written playbook to guide.
A GitGuardian researcher discovered a CISA contractor employee had uploaded exposed passwords to a public GitHub repository. When CISA responded, it had no written incident playbook and built its procedures in real time, the agency later admitted.
Journalist Brian Krebs reported the GitHub exposure in May. The disclosure raises questions about internal security at the agency responsible for protecting US critical infrastructure.
- Public GitHub repository
- Leak location
- GitGuardian researcher
- Discovered by
- May
- Reported in
- None written at time of incident
- Playbook status
Why it mattersIf the US body meant to coordinate cyber incident responses had no playbook for its own incidents, the gap in preparedness could leave government networks exposed.
Open this story in InSnip →
