The State of Secrets Sprawl – Health Industry Edition

Leaked today, vulnerable tomorrow

• 15,590 new secrets (API keys or credentials) leaked by Health-ISAC members in public GitHub in 2024
• 70% of the secrets leaked in 2022 are still valid
• 6,702 pro-bono alert emails sent to Health-ISAC members’ developers about leaked credentials
• In 2024, GitGuardian scanned 69.6 million public repositories, of which at least 4.61% contained a secret.
• Generic secrets: a growing blind spot
• Learn how to combat secrets sprawl

Read the white paper by GitGuardian, a Health-ISAC Navigator.

2025 Aug WP StateOf2025 GitGuardian
Size : 11.4 MB Format : PDF

• Related Resources & News
• Threat Actor Playbook: Conversational Social Engineering in Care Settings
• The Human Risk Layer of AI
• Cybersecurity in the Lab
• Operation Vital Signs: First-of-its-kind exercise stress tests health sector cyber resilience
• What’s in America’s Code?
• Introducing AI Agents to Your Identity Fabric
• Cyberattacks on Healthcare Sector Jumped 14% in First Half of 2026
• What do cybersecurity leaders want in staff? These 3 skills beat certifications and experience
• Continuous attack surface monitoring and sophisticated social engineering assessment
• Hospital Networks are Becoming Targets in Cyberwarfare, and They’re Unequipped to Deal With It