Cybercrooks breach Red Hat's private GitLab repos - what we know about affected customers

Follow ZDNET: Add us as a preferred source on Google. A security breach will occur in every company's life. This time, it's Linux and cloud powerhouse Red Hat's turn. A newly surfaced cybercrime group calling itself Crimson Collective (also known as Eye Of Providence) claimed responsibility for breaching Red Hat's private GitLab repositories and stealing customer information and confidential source code. Also: Hackers stole 1 billion records from Salesforce customer databases with this simple trick - don't fall for it The group made the claim late Thursday on Telegram, posting screenshots allegedly showing directory listings from internal Red Hat projects. Red Hat has confirmed the breach. Red Hat stated: "We recently detected unauthorized access to a GitLab instance used for internal Red Hat Consulting collaboration in select engagements. We promptly launched a thorough investigation, removed the unauthorized party's access, isolated the instance, and contacted the appropriate authorities. Our investigation, which is ongoing, found that an unauthorized third party had accessed and copied some data from this instance." The hackers claim to have swiped almost 570GB of data from 28,000 internal development repositories. This data allegedly includes approximately 800 Customer Engagement Reports (CERs). Red Hat CERs are detailed documents from Red Hat's consulting services that contain sensitive information about client environments, such as architecture diagrams, network configu...