Home / Incidents / Data breach
GitHub Actions supply chain attack leaks secrets
A compromised tj-actions/changed-files GitHub Action leaked CI/CD secrets from hundreds of repositories, with Coinbase the apparent target.
- Organisation
- GitHub Actions (tj-actions)
- Disclosed
- 18 March 2025
- Affected
- Not stated
- Data
- CI/CD secrets, tokens
- Attacker
- Unknown
- Severity
- major
- Region
- Global
- Source
- CM-Alliance ↗
Cite this
Nuffield Consulting, “GitHub Actions supply chain attack leaks secrets”, The Daily Tech Wire outage & breach log, 18 Mar 2025. https://techwire.nuffieldconsulting.com/incidents/2025-03-18-github-actions-tj-actions-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: CM-Alliance, https://www.cm-alliance.com/cybersecurity-blog/biggest-cyber-attacks-ransomware-attacks-data-breaches-of-march-2025.
Related incidents
- 26 Mar 2025NYU website hacked to leak admissions dataNew York University · breach · Unknown · 1M claimed
- 21 Mar 2025Hacker claims 6 million Oracle Cloud SSO recordsOracle Cloud · breach · rose87168 · 6M claimed
- 19 Mar 2025PSEA breach exposes 500,000Pennsylvania State Education Association · breach · Rhysida · 517K records
- 6 Mar 2025NTT Communications breach exposes 18,000 business customersNTT Communications · breach · Unknown · 17.9K records