2024-05 · 2024-Q2
GitHub Copilot Training Data Secret Leakage
Outside the model: ContextAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Unknown
- Vendor response
- Unknown
- In the wild
- No
- Actor
- Not applicable
Target
GitHub Copilot
Impact
Copilot reproduces real, previously exposed secrets from training data; repos using Copilot show 40% higher secret leakage rates
Root cause
Training data memorization of secrets from public GitHub repositories
Sources
Catalog
Cite this: AgentProv incident record: GitHub Copilot Training Data Secret Leakage (2024-05). https://agentprov.com/incidents/2024-05-github-copilot-training-data-secret-leakage