2026 Trellix - unauthorized access to portion of source code repository

Trellix published a May 2026 statement saying it had identified unauthorized access to a portion of its source code repository. The company said it began working with forensic experts, notified law enforcement, and had found no evidence that its source code release or distribution process was affected or that its source code had been exploited. Security reporting noted that the exact data accessed and intrusion path had not yet been disclosed. BleepingComputer separately reported that the RansomHouse group claimed the intrusion and circulated alleged internal Trellix screenshots—claims not mirrored in Trellix's initial disclosure emphasis on repository scope.