Red Hat confirms breach of self-managed GitLab used for consulting

Red Hat confirmed late September that an unauthorized actor gained access to a GitLab instance used by its consulting business after a group calling itself the Crimson Collective posted on Telegram claiming it had exfiltrated roughly 570 gigabytes from about 28,000 private repositories, including customer engagement reports and configuration files tied to consulting projects. The company said the incident involved a self‑managed GitLab environment used for internal collaboration and that an investigation and remediation are underway.

Red Hat said investigators determined an unauthorized third party accessed and copied some data from the affected GitLab instance, which the company said typically stores project specifications, example code snippets and internal communications related to consulting engagements. Red Hat added it has not identified sensitive personal data among the impacted files and, at this time, has no reason to believe the issue affects other Red Hat services, products or its software supply chain. The company said it removed the unauthorized party's access, isolated the instance, implemented additional hardening measures and contacted appropriate authorities....