← Medium

2019 Medium — GitHub tokens used to access private source snapshots after third-party exposure

2019 Unknown records affected Share on X

Data compromised

Private repository content and developer secrets (scope per Medium disclosure)

Technical writeup

Medium said a third-party vendor token issue led to GitHub access and exposure of private source repositories; coverage described rotations for development secrets.

Root cause

Third-party compromise of tokens with downstream SCM access (per Medium/Vice reporting)

References