Mercedes-Benz
Disclosed Jan 26, 2024Unverified
Exposed GitHub token gave unrestricted access to Mercedes-Benz source code
Security researchers found that Mercedes-Benz left a private GitHub token online that gave unrestricted access to its GitHub Enterprise Server, allowing download of private source code repositories; the company said it would analyze the case and take remedial measures.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 26, 2024 |
| Attack | Exposed data |
| Data exposed | Source codeAPI keysCredentials and tokensInternal documents |
| Sector | Manufacturing · DE |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.