Unknown hackers have uploaded 270 GB of source code for one of the world’s most popular publications, The New York Times, to the 4chan image board.
The attackers managed to obtain the data using the platform’s open token.
Specifically, it is IT documentation, infrastructure tools, and source code, presumably for the viral game Wordle, tells us Bleeping Computer.
«Basically all the source code belongs to The New York Times Company, 270 GB. There are about 5 thousand repos (of which less than 30, I think, are additionally encrypted), a total of 3.6 million files», — says the post on the 4chan forum.
The New York Times confirmed the authenticity of the data that was stolen from the company’s GitHub repositories in January 2024.
According to a post by an anonymous user on 4chan, the database contains about 6223 folders.
In particular, the «readme» file from the archive indicates that the attacker used a GitHub token to access the company’s repositories and steal data.
The publication notes that the incident occurred in January 2024 after the credentials for «cloud-based third-party code platform» were disclosed. Later it became known that this platform was GitHub.
The company said that the hack of its GitHub account did not affect its internal corporate systems or its operations.
This is the second large-scale data leak from 4chan in a week — a little earlier, hackers posted 415 MB of data from the Disney Club Penguin game.