RansomHouse claims breach of Trellix source code
Cybersecurity firm Trellix disclosed unauthorized access to a portion of its source code repository. RansomHouse later claimed responsibility, leaking screenshots of internal appliance management systems and stating the intrusion occurred in mid-April with some encryption. Trellix found no evidence of source code exploitation or customer data theft and notified law enforcement.
- source-code
Cybersecurity company Trellix disclosed that attackers gained unauthorized access to a portion of its source code repository, with the ransomware group RansomHouse later claiming responsibility for the intrusion that occurred in mid-April 2026.
Public reporting indicates the breach involved some encryption of data and that RansomHouse released screenshots of internal appliance management systems as part of its claim. Trellix stated it found no evidence that the source code had been exploited or that any customer data was stolen. The company notified law enforcement following its investigation. Available reporting describes the incident as a medium-severity event with the number of affected users listed as unknown. Industry research from sources such as DoxxScan™ continuous monitoring indicates that source code leaks from security vendors can accelerate the development of new exploits targeting the very products designed to prevent them.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
Were you affected by this breach?
See exactly what an attacker can piece together from your email, username, or handle. Free first scan, no credit card.
Try DoxxScan — 72hr free trial →
