What CISA Got Right After Its GitHub Leak: Lessons Every Organization Should Copy

On May 14, 2026, we found 844 MB of sensitive CISA-related data in a public GitHub repository and got it taken down in 26 hours. I told the story in How We Got a CISA GitHub Leak Taken Down in Under a Day.Two months later, CISA published Lessons from CISA’s Cyber Incident.