Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Cisco

Disclosed Mar 31, 2026Unverified

Cisco source code reportedly stolen using Trivy supply-chain credentials

Attackers linked to TeamPCP reportedly used credentials stolen through the compromised Trivy GitHub Action to breach Cisco's development environment and copy code from more than 300 GitHub repositories plus AWS keys. Cisco did not respond to requests for comment.

What is known

People affectedNot stated in the sources we have
DisclosedMar 31, 2026
AttackSupply chain
Data exposedSource codeAPI keys
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofTrivy (2026)

Sources

Newsbleepingcomputer.com
Cisco source code stolen in Trivy-linked dev environment breach

Notices filed

TotalMar 31
ResearchCount not stated

Same campaign

CheckmarxSupply chain exposed credentials and tokens, API keys and source code.Supply chainTechILApr 26European CommissionSupply chain exposed names, emails, messages and internal documents.Supply chainGovernmentBEMar 27LiteLLMMalware slipped into popular LiteLLM AI gateway package stole developer credentialsSupply chainAIUSUnverifiedMar 24Aqua SecurityTrivy scanner releases and GitHub Actions hijacked to push credential stealerSupply chainTechILUnverifiedMar 21

Other breaches at Cisco

Vishing attack on Cisco CRM exposes Cisco.com user profilesPhishing exposed names, addresses, emails and phone numbers.PhishingTechUSUnverifiedAug 4, 2025Yanluowang-linked attacker breaches Cisco via employee's synced Google accountPhishing exposed internal documents and credentials and tokens.PhishingTechUSAug 10, 2022
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Cisco