Postmortem Analysis: Inside CISA’s Six-Month GitHub Secret Leak and Incident Response Failures
Executive Overview In an unprecedented move toward operational transparency, the Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive postmortem detailing a severe, multi-month data leak caused by a third-party contractor. For nearly six months, an unencrypted public GitHub repository titled "Private CISA" hosted 844 megabytes of sensitive agency infrastructure data. The exposed records…