{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T18:54:42.548Z",
  "tag": {
    "id": "circleci",
    "label": "CircleCI",
    "isStack": false,
    "url": "https://pwn.watch/t/circleci",
    "feed": "https://pwn.watch/t/circleci/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "circleci-security-incident-rotate-all-secrets-2023",
      "title": "CircleCI breach: rotate every secret",
      "url": "https://pwn.watch/i/circleci-security-incident-rotate-all-secrets-2023",
      "json": "https://pwn.watch/i/circleci-security-incident-rotate-all-secrets-2023.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "no-fix-needed",
      "product": "CircleCI",
      "tags": [
        "devtools",
        "circleci",
        "ci-cd",
        "secrets",
        "infostealer",
        "data-breach"
      ],
      "cveIds": [],
      "affectedVersions": [],
      "fixedVersions": [],
      "startedAt": "2023-01-04",
      "closedAt": "2023-01-13",
      "updatedAt": "2023-01-13",
      "summary": "Malware on a CircleCI engineer's laptop stole a 2FA-backed SSO session. The attacker then exfiltrated customer environment variables, tokens and keys along with the encryption keys, so CircleCI told every customer to rotate all secrets stored in the platform.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "circleci-security-incident-rotate-all-secrets-2023",
      "incidentTitle": "CircleCI breach: rotate every secret",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2023-01-13",
      "title": "Incident report: malware stole an engineer's SSO session in December 2022; customer data and encryption keys were exfiltrated",
      "body": null,
      "sourceUrl": "https://circleci.com/blog/jan-4-2023-incident-report/",
      "url": "https://pwn.watch/i/circleci-security-incident-rotate-all-secrets-2023"
    },
    {
      "incident": "circleci-security-incident-rotate-all-secrets-2023",
      "incidentTitle": "CircleCI breach: rotate every secret",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2023-01-04",
      "title": "CircleCI tells all customers to rotate every secret stored in CircleCI",
      "body": null,
      "sourceUrl": "https://circleci.com/blog/january-4-2023-security-alert/",
      "url": "https://pwn.watch/i/circleci-security-incident-rotate-all-secrets-2023"
    }
  ]
}