CircleCI
Security incidents tagged CircleCI. Newest first.
0 CircleCI incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 1387
- Longest quiet run: 1378 days (Jan 14–Oct 22)
Show 1 older incident1 older incident
January 2023 1
- CriticalNo fix needed
CircleCI breach: rotate every secret
Malware on a CircleCI engineer's laptop stole a 2FA-backed SSO session. The attacker then exfiltrated customer environment variables, tokens and keys along with the encryption keys, so CircleCI told every customer to rotate all secrets stored in the platform.
CircleCIClosed Jan 13, 2023
