Security incident affecting GitHub

We have identified a security breach affecting some of Ibexa’s GitHub accounts. It is related to an ongoing campaign targeting GitHub accounts across many organizations: https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html

What we know so far:

• The breach started silently with a limited attack October 25th. It escalated Wednesday 11th November.
• Our team has revoked affected access tokens today, Thursday 12th November, and is researching how the breach happened, and are reverting all modifications the attackers were able to make.
• Due to our permissions design the attackers were unable to affect stable branches of Ibexa DXP. This means our releases on 5th November are not affected.
• There is no indication that any of our release packages are affected. Stable release packages installed via Composer are safe.
• No customer data has leaked, and no internal systems have been compromised.

What you can do:

1. As a precaution, please avoid pulling development code from our GitHub repositories until we let you know the issue is fully resolved.
2. If you have pulled code from our GitHub repositories since 25th October, please switch to an earlier version and check whether you were affected. See the linked article for details.

We will share updates as our investigation progresses. If you notice anything unusual in our repositories or packages, please contact us at security@ibexa.co

Last updated: 2026-11-12 15:55