Skip to main content

GitHub enterprise deleted

ID:github_enterprise_deleted
Data type:GitHub
Severity:
Low
MITRE ATT&CK:TA0040:T1485

Description​

AlphaSOC detected deletion of a GitHub Enterprise account. This action removes enterprise-wide policies, configurations, billing settings, and user role assignments. Enterprise deletion impacts organizational access controls and governance, but preserves repository and package data unless explicitly deleted.

Impact​

Deletion of a GitHub Enterprise account disrupts source code management, breaks CI/CD pipelines, and removes access controls. This can result in loss of productivity, security policy enforcement gaps, and potential unauthorized access to organizational resources.

Severity​

SeverityCondition
Low
GitHub enterprise deleted

Investigation and Remediation​

Review GitHub audit logs to identify the actor and scope of deletion. Contact GitHub Support immediately to attempt account recovery if the deletion was unauthorized. Examine organization-level access and implement temporary access controls while enterprise policies and configurations are restored from documentation. Update incident response plans to include GitHub account recovery procedures for future incidents.