[Incident] Alleged Meckano data exposure — public repository requires verification
Source Reddit Cybersecurity
Discussion
A publicly accessible GitHub repository allegedly contains data associated with Meckano, an Israeli workforce-management platform. The authenticity, origin, and scope of the data exposure have not been independently verified. The repository's contents require further investigation by security researchers to confirm if this is a genuine data breach. No confirmed exploit or official vendor advisory is available at this time.
r/cybersecurity (opens in a new tab)u/BigLoafMusher0 points0 comments
A publicly accessible GitHub repository appears to contain material allegedly associated with Meckano, an Israeli workforce-management/attendance platform.
Source:
https://github.com/MichaelSilianov/leaked-meckano
I came across this while investigating publicly available information and wanted to bring it to the attention of the security community.
I have not independently verified that the material originated from Meckano, so I am not presenting this as a confirmed breach. The purpose of this post is to ask security researchers to independently assess the material and determine:
whether the data is authentic;
whether it actually originated from Meckano;
when the exposure may have occurred;
what information may have been affected; and
whether the incident has already been publicly disclosed.
I am deliberately not reproducing, uploading, or linking to individual records, credentials, or other exposed personal information.
If anyone has reliable independent reporting or technical analysis of this repository, I’d be interested in seeing it.
Source: https://github.com/MichaelSilianov/leaked-meckano
Links cited in the discussion
Also discussed in r/cybersecurity