SailPoint reports that hackers exploited a third-party application vulnerability to access a subset of its GitHub repositories on April 20, 2026. The company claims that production environments remained secure and has notified affected customers directly.