Lawmakers Demand Answers as CISA Tries to Contain Data Leak

A CISA contractor intentionally published AWS credentials and sensitive agency secrets on a public GitHub account in what lawmakers are calling a serious security breach at the agency tasked with protecting U.S. critical infrastructure. Congressional leaders are demanding answers about how the data leak occurred and why CISA has struggled to contain it and invalidate the exposed credentials, particularly given the agency's recent loss of senior staff following Trump administration personnel changes. Security experts warn the exposed files provided adversaries like China, Russia, and Iran with access information and roadmaps to federal networks.