Incident BriefingsCodeSecure network data incident

CodeSecure network data incident

An unauthorized actor viewed or copied information from CodeSecure systems.

Last modified

Summary

  • Environment: CodeSecure computer network
  • Operational impact: Personal information potentially affected; total population unconfirmed
  • Financial impact: No incident cost disclosed
  • Record status: Developing record. Reviewed November 2, 2026; updated as evidence emerges.

What happened

CodeSecure said an intruder accessed its systems on September 15, 2025 and viewed or copied information. Its October 27 notice limits the incident to CodeSecure before technical integration with AdaCore. [2]

Impact

Potentially affected information includes identity, contact, medical, insurance and financial information, plus usernames and passwords; categories vary by person. CodeSecure reported no known misuse as of its notice. [2]

Vermont’s submitted-report table lists three Vermont residents. This is not a nationwide total. [1]

Timeline

  1. Unauthorized access

    CodeSecure dates the systems access to this day.

    [2]

  2. Public notice

    The company published its notice.

    [2]

  3. Vermont report recorded

    The state table records the submission and resident count.

    [1]

  4. Briefing updated

    This briefing was last reviewed and updated on November 2, 2026.

Threat Group & Attack Vector

The entry method and discovery date remain undisclosed.

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

CodeSecure secured systems, commissioned forensic work, reviewed affected information, added safeguards and offered credit monitoring through notification letters. [2]