French cybersecurity firm CrowdSec has confirmed that approximately 300 private and public repositories were compromised and source code was stolen from them.
The company provides open source, crowdsourced threat intelligence, including a lightweight security engine to detect and block attacks targeting servers, networks, and applications.
Last week, the French outfit learned that source code had been stolen from its GitHub repositories in May 2026.
CrowdSec has confirmed the report, noting that both private and public code was exfiltrated, and that roughly 300 repositories were affected, including approximately 170 private ones.
“The private part contains the source code for our SaaS console, some AWS Cloud routines, some connectors, and automations,” the company said.
According to CrowdSec, no credentials or other types of data related to its customers were leaked, and the impact is limited to its own organization.
“Our team quickly hunted for any token, credential, or sensitive leak that could enable lateral movement but found none so far,” it said.