Crimson Collective
Security incidents tagged Crimson Collective. Newest first.
0 Crimson Collective incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 386
- Longest quiet run: 377 days (Oct 11–Oct 22)
Show 1 older incident1 older incident
October 2025 1
HighRed Hat Consulting GitLab breached: ~800 customer engagement reports stolenNo fix needed
Red Hat Consulting self-managed GitLab No fix needed
The Crimson Collective broke into a self-managed GitLab instance used by Red Hat Consulting and claimed about 570 GB from 28,000 repos, including roughly 800 Customer Engagement Reports with infrastructure, config and credential details. Red Hat confirmed the access and said its products, supply chain and hosted services were not affected. ShinyHunters later joined the extortion.
