Federal Cybersecurity Agency Found Leaked Passwords by Accident

A contractor accidentally posted sensitive government passwords online in May 2026. The federal agency in charge of cybersecurity, CISA, had no ready plan for handling this crisis. Staffers figured out what to do as they went. A journalist tipped them off—without that call, they might never have noticed. No data was actually stolen.