Klue integration compromise exposes customer data and disables integrations

Klue reported that an attacker used a previously compromised GitHub personal access token on 11 June 2026 to introduce unauthorized code into its integration service, harvest OAuth credentials and use those credentials to extract data from customer environments. Klue subsequently disabled affected integration infrastructure and rotated credentials. This represents compromise of a legitimate third-party software integration as well as temporary loss of that integration service.