Ransomware needs a way in. Stolen credentials are the cheapest one.

GitHub Ransomware Attack

github.comData extortion

lapsus$Group

United StatesCountry

Jun 13, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

View group profile

Domain

github.com

Industry

Technology

Country

United States

Discovered

about 2 months ago

Attack date

Jun 13, 2026

Confidence

100%

Severity

Critical

Status

Data Leaked

Threat group

lapsus$

Total victims

First seen

Mar 2026

Last seen

Jun 2026

Group status

active

Sophistication

Impact score

105

Threat level

2.4/10

Aggressiveness5/10

Lethality0.2/10

Criticality1.9/10

Status breakdown

Data Leaked

this victim

12.0%3

Claimed88.0%22

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Technology

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (73)

Same group · lapsus$

Group activity

Monthly attacks · lapsus$

total · avg 6.3/mo