The leak occurred because the sensitive personal data was stored in private GitHub repositories in violation of the company's own internal security policies. Meta has since disabled the unauthorized access, involved law enforcement, and is providing affected individuals with credit and dark web monitoring services.
