CISA Contractor Leaks AWS GovCloud Keys

A contractor for the United States — Cybersecurity and Infrastructure Security Agency>>> (CISA) inadvertently exposed highly sensitive administrative credentials for multiple Amazon — Amazon Web Services>>> GovCloud accounts and dozens of internal CISA systems on a public Microsoft — GitHub>>> repository for at least six months. The breach, discovered by Guillaume Valadon>>> of GitGuardian>>> and validated by Philippe Caturegli>>> of Seralys>>>, included plaintext passwords, cloud access tokens, and detailed files on CISA's software development. The repository, named 'Private-CISA', was maintained by an employee of Nightwing>>> and remained publicly accessible until mid-May 2026. Experts called it one of the most serious government data leaks in recent years, highlighting poor security practices such as disabling Microsoft — GitHub>>>'s secret scanning and storing passwords in plain text. Although CISA stated there is no indication of sensitive data compromise and has revoked credentials, the incident raises serious questions about government cybersecurity, contractor oversight, and the agency's ability to protect the United States>>>' critical infrastructure, especially given its reduced staffing and budget constraints.