MoneyForward GitHub Breach: Source Code Stolen, 370 Records Exposed

Japanese financial services firm MoneyForward reported a compromise of its corporate GitHub account in early May 2026.

Key Details

• What was compromised: Attackers exfiltrated source code repositories and potentially 370 records related to MoneyForward Business Cards.
• Cause: Inadvertently saved personal data on GitHub during a service update.
• Timeline: Breach discovered between May 1-3, 2026.
• Category: Cybersecurity incident affecting financial services sector.

This incident highlights the risks of storing sensitive personal and financial data on public version control platforms.