gcdRadar
closedclosed 13 Oct 2026Breaches & attacks4 Confirmed real-world lossAI

AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos

GitHub, AI coding agents

AI coding assistants improperly published over 13,000 internal images and sensitive documents from hundreds of organizations to public GitHub repositories. The exposed data included customer billing records and unreleased product features.

first report
29 Sep 2026
last update
29 Sep 2026

Timeline · 1

  1. 29 Sep 2026AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories

Sources · 1

Research and catalogues

  1. 2026-09-29

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
Data leak
severity
4 · Confirmed real-world loss
targets
Enterprise deployment
mitre atlas
no technique for these categories
dates
happened 29 Sep 2026 · first reported 29 Sep 2026
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos

https://gcdradar.vercel.app/incidents/ai-coding-agents-exposed-internal-images-and-data-on-public · AIR-2026-0377 · closed 2026-10-13

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss)
- Fix status: No fix needed
- First reported: 2026-09-29
- AI role: AI-enabled attack
- Products: GitHub, AI coding agents

## Summary

AI coding assistants improperly published over 13,000 internal images and sensitive documents from hundreds of organizations to public GitHub repositories. The exposed data included customer billing records and unreleased product features.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-09-29: AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories (https://incidentdatabase.ai/cite/1734)

## Sources

- 2026-09-29 AI Incident Database: AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories https://incidentdatabase.ai/cite/1734

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    AI
  2. closed
    AI
  3. closed
    AI
  4. closed
    AI
  5. closed
    AI
  6. closed
    AI