GitHub Enterprise account deleted
Description
AlphaSOC detected deletion of a GitHub Enterprise account. This action removes enterprise-wide policies, configurations, billing settings, and user role assignments. Enterprise deletion impacts organizational access controls and governance, but preserves repository and package data unless explicitly deleted.
Impact
Deletion of a GitHub Enterprise account disrupts source code management, breaks CI/CD pipelines, and removes access controls. This can result in loss of productivity, security policy enforcement gaps, and potential unauthorized access to organizational resources.
Severity
| Severity | Condition |
|---|---|
Informational | GitHub enterprise deleted |
Investigation and Remediation
Review GitHub audit logs to identify the actor and scope of deletion. Contact GitHub Support immediately to attempt account recovery if the deletion was unauthorized. Examine organization-level access and implement temporary access controls while enterprise policies and configurations are restored from documentation. Update incident response plans to include GitHub account recovery procedures for future incidents.