Trellix: Trellix Confirms Source Code Breach With Unauthorized Repository Access

Trellix Confirms Source Code Repository Breach, Investigates Unauthorized Access

Cybersecurity firm Trellix disclosed a security breach involving unauthorized access to a portion of its source code repositories. The company detected the compromise "recently" and has since engaged leading forensic experts to investigate the incident, while also notifying law enforcement.

Trellix stated that its investigation has found no evidence that the accessed source code was exploited or that its release and distribution processes were impacted. However, the company did not specify the exact data accessed, the duration of the breach, or the threat actors responsible. Additional details will be shared as the investigation progresses.

Formed in January 2022 through the merger of McAfee Enterprise and FireEye, Trellix is owned by Symphony Technology Group. The breach follows Google’s $5.4 billion acquisition of Mandiant, which was previously part of FireEye, around the same time. The incident remains under active investigation.

Source: https://thehackernews.com/2026/05/trellix-confirms-source-code-breach.html

Trellix TPRM report: https://www.rankiteo.com/company/trellixsecurity

"id": "tre1777710220",
"linkid": "trellixsecurity",
"type": "Breach",
"date": "5/2026",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Cybersecurity',
                        'name': 'Trellix',
                        'type': 'Company'}],
 'data_breach': {'type_of_data_compromised': 'source code'},
 'date_detected': 'recently',
 'description': 'Cybersecurity firm Trellix disclosed a security breach '
                'involving unauthorized access to a portion of its source code '
                'repositories. The company detected the compromise recently '
                'and has engaged leading forensic experts to investigate the '
                'incident, while also notifying law enforcement. The '
                'investigation has found no evidence that the accessed source '
                'code was exploited or that its release and distribution '
                'processes were impacted.',
 'impact': {'data_compromised': 'source code repositories'},
 'investigation_status': 'Active',
 'references': [{'source': 'Cyber Incident Description'}],
 'response': {'law_enforcement_notified': 'Yes',
              'third_party_assistance': 'leading forensic experts'},
 'title': 'Trellix Source Code Repository Breach',
 'type': 'Unauthorized Access'}