Red Hat
Disclosed Oct 2, 2025Confirmed
Crimson Collective steals Red Hat consulting GitLab repositories
Red Hat confirmed a security incident involving a GitLab instance used by its consulting business after the Crimson Collective claimed to have stolen about 570GB from 28,000 internal repositories, including around 800 Customer Engagement Reports with customer infrastructure details and tokens. ShinyHunters later joined the extortion.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Oct 2, 2025 |
| Attack | Hacking |
| Data exposed | Source codeInternal documentsCredentials and tokensOther |
| Sector | Tech · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.