CloudBees

CloudBees is a DevOps solutions provider headquartered in the United States of America. The company offers continuous integration and deployment capabilities through its CodeShip platform. CodeShip enables developers to automate building, testing, and deploying applications via configurable pipelines. The service integrates with source control systems such as GitHub, using OAuth tokens for authentication. CloudBees serves both individual developers and enterprise organizations seeking streamlined software delivery. Its Pro tier provides additional features including access to environment variables, scripts, and encryption keys for pipeline security.

In June 2019, CloudBees disclosed a data breach affecting CodeShip after unauthorized access to a failover database instance was detected. The breach exposed sensitive pipeline data such as build scripts, environment variables, access tokens, and AES keys used by Pro customers. Additionally, hashed passwords, one‑time password recovery details, and business invoicing information including names, contact data, and tax identifiers were potentially compromised. Payment data and logging systems were reported to remain unaffected by the incident. In response, CloudBees revoked all related OAuth tokens and SSH keys, rotated internal secrets, and rebuilt its cloud infrastructure. The company subsequently implemented stricter access controls and conducted comprehensive security reviews to harden its environment. These actions underscore CloudBees’ focus on securing DevOps workflows and maintaining trust in its continuous integration services.