In this incident, the unauthorized actor exfiltrated customer information on December 22, 2022, which included environment variables, keys, and tokens for third-party systems.
A lot of production AWS/GCP keys are likely stolen for those that deploy from CI/CD.
A lot of production AWS/GCP keys are likely stolen for those that deploy from CI/CD.