Krebs on Security
5/22/2026

Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Short summary
A CISA contractor intentionally published AWS GovCloud credentials and sensitive agency secrets on a public GitHub account. Congressional lawmakers are demanding a full briefing as CISA struggles to contain the breach and complete credential invalidation. The incident exposes critical gaps in government infrastructure security and contractor access controls.
- •CISA contractor leaked AWS GovCloud keys and classified secrets on public GitHub
- •Lawmakers demanding full briefing as CISA works to contain breach
- •Highlights systemic risks in government infrastructure security practices
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



