Lawmakers Demand Answers as CISA Tries to Contain Data Leak

A CISA contractor intentionally published highly privileged AWS GovCloud keys and numerous internal agency secrets to a public GitHub repository, exposing files that detail CISA’s build/test/deploy processes. CISA is still trying to contain the breach and invalidate leaked credentials while lawmakers in both chambers demand briefings; the exposure risks compromise of GovCloud accounts, internal systems, and sensitive government operational data. Related coverage in the feed highlights other major incidents (Kimwolf IoT botnet, Canvas data-extortion attack, widespread patching), but the GitHub/