SAS Institute, a major U.S.-based analytics and AI software manufacturer, suffered a data breach where threat actors exfiltrated old source code (dated 2003–2011), including its Business Rules Manager source code and documentation. While the stolen data is outdated—likely an old backup—the exposure of source code poses a long-term risk, as attackers could analyze it to develop exploits for future cyberattacks. Researchers warn that such breaches in leading service providers (like SAS) are increasingly used as a springboard to target their customers, amplifying potential downstream threats. The incident highlights vulnerabilities in legacy data storage and the persistent danger of source code leaks, even if the immediate operational impact appears limited.