Cisco
Disclosed Mar 31, 20265 months agoUnverified
Cisco source code reportedly stolen using Trivy supply-chain credentials
Attackers linked to TeamPCP reportedly used credentials stolen through the compromised Trivy GitHub Action to breach Cisco's development environment and copy code from more than 300 GitHub repositories plus AWS keys. Cisco did not respond to requests for comment.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 31, 2026 |
| Attack | Supply chain |
| Data exposed | Source code, API keys |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Trivy (2026) |
Sources
| Source | |
|---|---|
| Cisco source code stolen in Trivy-linked dev environment breachbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 31 |
Same campaign
| Organization | Affected | ||||
|---|---|---|---|---|---|
| Apr 265 months ago | Supply chain | Tech | Confirmed | Unknown | |
| Mar 276 months ago | Supply chain | Government | Confirmed | Unknown | |
| Mar 246 months ago | Supply chain | AI | Unverified | Unknown | |
| Mar 216 months ago | Supply chain | Tech | Unverified | Unknown |
Other breaches at Cisco
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Vishing attack on Cisco CRM exposes Cisco.com user profilesAug 4, 20251 year agoPhishingUnverified | Aug 4, 20251 year ago | Phishing | Tech | Unverified | Unknown |
| Yanluowang-linked attacker breaches Cisco via employee's synced Google accountAug 10, 20224 years agoPhishing | Aug 10, 20224 years ago | Phishing | Tech | Confirmed | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.