1
Published signals
currently linked to this company
Company intelligence
Redhat cybersecurity incidents and threat signals
redhat.com
This company page brings together public reporting currently associated with Redhat. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
0
Last 90 days
recent published signals
0
High or critical
confidence classifications
June 25, 2026
Latest report
most recent published signal
Explore related intelligence
Explore this reporting from another angle
Based on all published signals currently linked to Redhat. Affected countries come from victim data; the company country above remains a separate profile fact. Counts describe this reporting set, not overall incident prevalence.
Confirmed impacts
Company signals
All published signals involving Redhat
Red Hat Confirms GitLab Instance Breach by Crimson Collective
Red Hat confirmed a security incident where the cyber threat group 'Crimson Collective' claimed responsibility for exfiltrating approximately 570 GB of compressed data from over 28,000 internal GitLab repositories. The stolen data included sensitive information from around 800 Customer Engagement Reports (CERs), containing client infrastructure details, authentication tokens, and network configurations. The breach was later associated with extortion attempts by the ShinyHunters group.
FAQ
Questions about Redhat cybersecurity reporting
What does the Redhat page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Redhat.
Does every mention of Redhat appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.