Lapsus$ Publishes 95GB of Checkmarx Data After Supply Chain Breach

Analysis
Per a single BleepingComputer report with an established track record on Lapsus$ activity, the publication forecloses Checkmarx's option to prevent disclosure and extends the threat surface to every actor with dark web access. Published API keys and database credentials demand immediate rotation across the customer base; secondary actors will likely attempt exploitation within 90 days of the April 27 release. The KICS source code carries a longer-fuse risk: knowledge of detection logic enables adversaries to engineer bypass signatures, degrading a tool embedded in enterprise CI/CD pipelines. The volume is consistent with a selective release, with higher-value credentials potentially retained for continued leverage or sale.