A publicly-viewable GitHub repository of Adafruit resulted in unauthorized access and data leak of some of its user data.
The exposed data included names, email addresses, shipping/billing addresses, order details, and order placement status via payment processor or PayPal.
Adafruit immediately worked with the former employee, deleted the relevant GitHub repository, and investigated the incident.
"id": "ADA13627422",
"linkid": "adafruit",
"type": "Breach",
"date": "03/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"