CLAIM-2026-10-02-02

93% of the exposed images were found in repositories under personal employee accounts rather than company GitHub organisations.

Why it matters

Organisation-scoped secret scanning and repository policy does not see personal accounts. The detection surface for this leak sits outside the estate most security teams monitor, which is why it ran for roughly three months.

Sources

• glowlabs2026pixelleak
• helpnetsecu2026ai