---
title: "CodeSecure network data incident"
description: "CodeSecure disclosed September 2025 unauthorized access involving personal information before its technical integration with AdaCore."
incident_type: "Data incident"
status: "active"
last_modified: "2026-11-02"
canonical_url: "https://www.ally.security/incidents/codesecure-network-data-incident-2025"
markdown_url: "https://www.ally.security/incidents/codesecure-network-data-incident-2025.md"
stix_url: "https://www.ally.security/incidents/codesecure-network-data-incident-2025/stix.json"
---

# CodeSecure network data incident

An unauthorized actor viewed or copied information from CodeSecure systems.

Last modified Nov 2, 2026 · 2 sources

## Summary

- **Environment:** CodeSecure computer network
- **Operational impact:** Personal information potentially affected; total population unconfirmed
- **Financial impact:** No incident cost disclosed

## What happened

[CodeSecure](https://www.codesecure.com/) said an intruder accessed its systems on September 15, 2025 and viewed or copied information. Its [October 27 notice](https://www.codesecure.com/) limits the incident to CodeSecure before technical integration with [AdaCore](https://www.adacore.com/). [2](#source-2)

## Impact

Potentially affected information includes identity, contact, medical, insurance and financial information, plus usernames and passwords; categories vary by person. CodeSecure reported no known misuse as of its notice. [2](#source-2)

[Vermont’s submitted-report table](https://ago.vermont.gov/categories/security-breach-notices) lists **three Vermont residents**. This is not a nationwide total. [1](#source-1)

## Timeline

### September 15, 2025 — Unauthorized access

CodeSecure dates the systems access to this day. [2](#source-2)

### October 27, 2026 — Public notice

The company published its [notice](https://www.codesecure.com/). [2](#source-2)

### October 28, 2026 — Vermont report recorded

The state table records the submission and resident count. [1](#source-1)

### November 2, 2026 — Briefing updated

This briefing was last reviewed and updated on November 2, 2026.

## Threat Group & Attack Vector

The entry method and discovery date remain undisclosed.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

CodeSecure secured systems, commissioned forensic work, reviewed affected information, added safeguards and offered credit monitoring through notification letters. [2](#source-2)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/codesecure-network-data-incident-2025/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Security Breach Notices

regulatory · Vermont Office of the Attorney General

<https://ago.vermont.gov/categories/security-breach-notices>

<a id="source-2"></a>

### Notice of Data Security Event

official · CodeSecure · Oct 27, 2026

<https://www.codesecure.com/>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Disclosed At · 100% confidence · current**  
   CodeSecure network data incident: 2026-10-27
2. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: CodeSecure secured its systems, engaged forensic specialists, reviewed the affected information, implemented additional cybersecurity measures and offered complimentary credit monitoring in notification letters.
3. **Affected Individual Count · 100% confidence · current**  
   CodeSecure network data incident: 3 individual
4. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: Unauthorized systems access
5. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: CodeSecure stated that the incident affected only its systems before technical integration with AdaCore.
6. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: Vermont report recorded
7. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: Public notice published
8. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: CodeSecure said an unauthorized actor accessed its systems on September 15, 2025 and viewed or copied certain information.
9. **Occurred At · 100% confidence · current**  
   Unauthorized systems access: 2025-09-15
10. **Occurred At · 100% confidence · current**  
   Vermont report recorded: 2026-10-28
11. **Occurred At · 100% confidence · current**  
   CodeSecure network data incident: 2025-09-15
12. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: Potentially affected information varies by individual and may include names, addresses, dates of birth, Social Security numbers, driver’s license or passport information, medical or health-insurance information, financial accounts, and usernames and passwords.
13. **Resulted In · 100% confidence · current**  
   CodeSecure network data incident: As of its October 27 notice, CodeSecure said it was unaware of attempted or actual misuse or identity fraud involving the information.
14. **Occurred At · 100% confidence · current**  
   Public notice published: 2026-10-27
15. **Affected Organization · 100% confidence · current**  
   CodeSecure network data incident: CodeSecure

</details>