# Cypress Security Incident: Status and Response

DevFeed: [Cypress Security Incident: Status and Response](<https://devfeed.tech/articles/cypress-security-incident-status-and-response-12611.md>)

Original publisher: [Read original article](<https://www.cypress.io/blog/cypress-security-incident-status-and-response/>)

Published: 2026-08-13T00:47:40Z

Content type: news

Language: en

Sources: [Cypress Blog](<https://devfeed.tech/sources/cypress-blog.md>)

Topics: [Cypress](<https://devfeed.tech/topics/cypress.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Security](<https://devfeed.tech/topics/security.md>), [data](<https://devfeed.tech/topics/data.md>), [ci](<https://devfeed.tech/topics/ci.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [ci](<https://devfeed.tech/tags/ci.md>), [cypress](<https://devfeed.tech/tags/cypress.md>), [data](<https://devfeed.tech/tags/data.md>), [git](<https://devfeed.tech/tags/git.md>), [incident](<https://devfeed.tech/tags/incident.md>), [security](<https://devfeed.tech/tags/security.md>), [third-party](<https://devfeed.tech/tags/third-party.md>)

## AI overview

Cypress provides updates on a security incident involving a third-party analytics environment. The article clarifies what recorded test content contained, distinguishes it from unaffected test artifacts, and explains how repository URLs are captured from CI environments, including possible access tokens.

## Source excerpt

Last updated: August 17, 2026. This page is our central record for this incident and will be updated as our investigation progresses. Security Incident Update: August 17, 2026 As our investigation continues, we are expanding on two parts of our previous post that have prompted the most questions: what the test data encompasses, and how Cypress records the repository URL associated with your runs. What "test data" encompasses Test data, also referred to as recorded test content, is data as