Red Hat confirms security incident after hackers breach GitLab instance

Red Hat confirms a security incident after hackers breached a GitLab instance, according to DataBreaches[.]Net. The extortion group calling itself the Crimson Collective claims to have stolen nearly 570GB of compressed data across 28,000 internal development repositories, with Red Hat stating the breach affected its consulting business but not verifying the attackers’ claims about the GitLab repos and customer CERs.

The leak purportedly includes about 800 Customer Engagement Reports, which can contain sensitive information about a customer’s network and platforms. A CER is described as a consulting document prepared for clients that often contains infrastructure details, configuration data, authentication tokens and related information.

The hackers’ spokesperson provided what they claim is the CER for T-Mobile, but DataBreaches has not yet submitted it to T-Mobile for verification, and the group declined to discuss incident specifics or ransom amounts.