# Gitee scan found 26,400 live credentials across 7,256,531 public repositories

_Published Wednesday, October 28, 2026 at 2:01 PM EDT · Security · Latest · Tier 2 — Notable_

![Gitee scan found 26,400 live credentials across 7,256,531 public repositories — Primary](https://images.contentstack.io/v3/assets/blt7151619cb9560896/blt885813ca79e82453/6ae0b6b355b21137d9b7ce99/Blog_Meta_Image_Template_Brand_Refresh_(4).png)

Ben Zimmermann found 26,400 unique credentials that successfully authenticated during a scan of 7,256,531 public Gitee repositories, according to his guest post published by MongoDB. Subsequent revocation remained unconfirmed.

TruffleHog and Kingfisher searched repository histories and checked credentials against vendor APIs. Either scanner alone would have caught only about half the credentials.

The findings included an active organization-admin credential for a major enterprise AI platform and thousands of live cloud access keys. Zimmermann sent the vendors with the highest exposure volumes their affected credentials and repository metadata to help identify customers.

## Sources

- [mongodb.com](https://www.mongodb.com/company/blog/technical/scanning-7-point-25-million-public-repositories-chinas-largest-git-platform-for-secrets)

---
Canonical: https://techandbusiness.org/newswire/pViEEdPb9bvh2aMwjw_TXv
Published: 2026-10-28T18:01:21.743Z
Story chronology: 2026-10-28T00:00:00.000Z
Retrieved: 2026-10-28T22:08:49.431Z
Publisher: Tech & Business (techandbusiness.org)