Did You Receive a Notice About the Meta GitHub Data Breach? Learn About Your Options

On October 13, 2026, Meta Platforms, Inc. said it was notifying roughly 1,500 people that their personal information was affected after an outside group gained access to some of the company's GitHub repositories. According to Meta, the attackers used an employee's stolen credentials, and the intrusion was detected a few weeks before the announcement. Meta says its security team cut off the attackers' access and brought in GitHub and law enforcement. Meta has stated that this was not a vulnerability in any Meta product and that its internal systems were not breached.

According to Meta's statements to SecurityWeek and other reporting, the data taken included:

• Business data, mainly software code related to some Meta products (about 99% of the data taken)
• Personal data (about 1% of the data taken), some of which Meta describes as synthetic or anonymized test data

Meta has not publicly listed the specific categories of personal information involved. Most of the roughly 1,500 people being notified are reported to be Meta employees in the United States. Notifications began on October 13, 2026, and Meta says affected individuals are being offered credit and dark web monitoring services and that regulators have been notified.

As of the date of this page, we are not aware of any lawsuit filed over this incident.

If you received a notice from Meta about this incident, you may want to understand your options. With your consent, the form below lets us share your information with independent law firms that may contact you.

DataBreachRelief.com is not a law firm and does not provide legal advice. With your consent, information you submit may be shared with one or more independent law firms. Submitting information does not create an attorney-client relationship, and no outcome is guaranteed.