Trellix Confirms Source Code Breach With Unauthorized Repository Access

Cybersecurity company Trellix has announced that it suffered a breach that enabled unauthorized access to a "portion" of its source code.

The company said it "recently identified" the compromise of its source code repository and that it began working with "leading forensic experts" to resolve the matter immediately. Trellix has also notified law enforcement.

The full scope of the breach, the duration of the unauthorized access, and the specific repositories affected have not been publicly disclosed at the time of writing.

Editorial note: Source-code disclosures of this nature can have downstream legal implications around data protection, vendor liability, and incident-notification obligations under applicable privacy frameworks.