Trellix Confirms Source Code Breach With Unauthorized Repository Access

Ravie LakshmananMay 02, 2026Data Breach / Enterprise Security

Cybersecurity company Trellix has announced that it experienced a breach that allowed unauthorized access to a “portion” of its source code.

The company stated that it detected the compromise of its source code repository and immediately engaged with forensic experts to address the issue. Law enforcement has also been informed of the incident.

Trellix did not reveal the specific data that may have been accessed by the attackers but emphasized that there is no evidence of the source code being compromised or misused.

“Our investigation has not found any indication of our source code release process being impacted or our source code being exploited,” the company affirmed.

No information regarding the perpetrators or the duration of the breach has been disclosed by Trellix. The company mentioned that further details will be provided once the investigation is concluded.

Trellix, a company owned by Symphony Technology Group, was established in January 2022 following the merger of McAfee Enterprise and FireEye. Concurrently, Google acquired Mandiant, previously owned by FireEye, in a deal valued at $5.4 billion.

In response to inquiries, a Trellix spokesperson acknowledged the breach and directed to the official statement on the company’s website.

(This story is developing. Stay tuned for updates.)