Breaking: Heard a rumor about a major CI/CD platform's security incident. Any confirmations?

Hey everyone, saw a pretty wild thread on another forum. Someone was claiming a big CI/CD provider (names were being hinted at but not said outright) had a major data exposure last week. Something about misconfigured internal tooling leaking build logs and env vars?

As someone new to setting up pipelines for my team, this has me worried. We're evaluating a few platforms right now, and security is a top concern. Has anyone heard anything concrete, or is this just gossip? Really hoping it's not the one we're leaning towards 😬

Thanks in advance!