An internal code repo used by New York State's IT office was exposed online
Companies, agencies, institutions, etc
GitLab
SpiderSilk
Samsung
Clearview AI
MoviePass
TechCrunch
Office of Information Technology Services
New York State’s
ITS
Nigama Ventures
the U.S. State Department
the U.S. Department of Defense
People
Mossab Hussein
Scot Reif
Indotronix-Avani
Mark Edmonds
Groups
No matching tags
Physical locations
No matching tags
Places
No matching tags
Locations
New York
Dubai
New York State’s
India
Events
No matching tags
Summary
It’s not known exactly how long the GitLab server was accessible in this way, but historic records from Shodan, a search engine for exposed devices and databases, shows the GitLab was first detected on the internet on March 18.SpiderSilk shared several screenshots showing that the GitLab server contained secret keys and passwords associated with servers and databases belonging to New York State’s Office of Information Technology Services.
As said here by Zack Whittaker