Developers who rely on Claude Code to produce code and co‐author commits leak secrets at 2x the baseline rate.

The State of Secrets Sprawl 2026

May 27, 2026

Developers who rely on Claude Code to produce code and co‐author commits leak secrets at 2x the baseline rate. — This cybersecurity statistic was published by The State of Secrets Sprawl 2026 in May 2026. It covers topics including Claude Code, Leaked Secrets. The original data appears in GitGuardian. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 3/17/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Developers who rely on Claude Code to produce code and co‐author commits leak secrets at 2x the baseline rate. This data was published by The State of Secrets Sprawl 2026 and covers Claude Code, Leaked Secrets.

Where does this data come from?

This statistic comes from GitGuardian, published by The State of Secrets Sprawl 2026 on May 27, 2026. You can view the original report at https://www.gitguardian.com/state-of-secrets-sprawl-report-2026.

What cybersecurity topics does this cover?

This statistic relates to Claude Code, Leaked Secrets. Browse more statistics on Claude Code or from The State of Secrets Sprawl 2026.

CYBERSTATS

Developers who rely on Claude Code to produce code and co‐author commits leak secrets at 2x the baseline rate.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

Internal repos are 6x more likely to contain hardcoded secrets than public ones.

Leaks outside of the codebase are 13% more likely to be categorized as critical than secrets discovered inside the code.

Secrets found in self‐hosted, private GitLab instances and Docker registries were 3 to 4 times more likely to be valid.

28% of incidents originate entirely outside repositories—in Slack, Jira, Confluence, and similar tools.

Eight of the ten types of leaked secrets showing the sharpest increase year over year are tied to AI services.

LLM infrastructure (orchestration, retrieval augmented generation (RAG), vector storage) is leaking 5x faster than core model providers.

Browse by Topic

Stay Ahead of Cyber Threats