ZAPIER SAYS SOMEONE BROKE INTO ITS CODE REPOSITORIES AND MAY HAVE ACCESSED CUSTOMER DATA

Summary from the TLDR InfoSec newsletter

Zapier has informed customers that an unauthorized individual accessed specific Zapier code repositories but that there was no production infrastructure or data breach. Notably, the repositories contained some customer data that was inadvertently copied for debugging. Zapier stated that the attacker accessed the repositories because of a 2FA misconfiguration on an employee's account.