TRELLIX disclosed a security breach affecting part of its source code repository, with unauthorized access to a portion of the codebase. The company said it quickly launched an investigation with forensic experts and notified law enforcement. While the exact data accessed remains unclear, Trellix stated there is no evidence that its source code has been altered or exploited.
According to Trellix, the update published by the security firm says that, based on their investigation to date, there is no evidence that the source code release or distribution process was affected, or that the source code has been exploited, and that further details will be shared as appropriate once the investigation is complete. The company did not disclose who carried out the attack or how they gained access, and it remains unclear how long attackers had access to the repository.