Breach Record

CircleCI

DISCLOSED 2026-10-12 · MALWARE

On December 16, 2022, malware compromised a CircleCI engineer's laptop, bypassing the company's antivirus software. The malware stole a session cookie from the engineer's 2FA-backed SSO session, allowing the attacker to impersonate the employee remotely. This led to unauthorized access to CircleCI's systems and a subsequent data breach.

The record

What we know

Disclosed

2026-10-12

Attack vector

Malware

Sources

Cited reporting

↗ securityboulevard.com (2026-10-12)

Similar vector · recent

Other malware breaches on file

This page is the permanent ColdRecon entry for the CircleCI disclosure. It updates if new public reporting emerges. All tracked breaches →

CircleCI just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →