ClosedHighNo fix needed
Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen
Red Hat Consulting self-managed GitLab
The Crimson Collective broke into a self-managed GitLab instance used by Red Hat Consulting and claimed about 570 GB from 28,000 repos, including roughly 800 Customer Engagement Reports with infrastructure, config and credential details. Red Hat confirmed the access and said its products, supply chain and hosted services were not affected. ShinyHunters later joined the extortion.
Why this severity: Data theft of customer engagement reports; extortion
- Started
- Oct 1, 2025
- Closed
- Oct 10, 2025
Affected
- n/a
Fixed in
No fixed release yet
Timeline3
Advisories2
News & write-ups2
Notes & caveats
Claim/confirmation dates (Oct 1/2) approximate.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
