GitHub Investigates Unauthorized Access to Internal Repositories After TeamPCP Sale Listing

GitHub is investigating unauthorized access to its internal repositories after the threat actor TeamPCP listed the platform’s source code and internal organizations for sale on a cyber‑crime forum. The investigation follows reports that TeamPCP had gained access to internal repositories, though GitHub has not yet confirmed the extent of the breach. No evidence has surfaced that customer data stored outside GitHub’s internal repositories has been compromised. The incident raises concerns about the security of internal code and the potential for intellectual‑property theft. GitHub is reviewing access controls and monitoring logs to determine how the attacker gained entry. The threat actor is known to target high‑value source code for resale. The investigation is ongoing, and GitHub has not yet released a public statement on the impact to customers.