Grafana reveals experiencing GitHub Security Incident, with Hackers Stealing Codebase and Carrying Out Ransomware Attack

On May 18, open-source data visualization tool Grafana announced on the X platform that an unauthorized attacker recently gained access to a token that allowed entry to Grafana Labs’ GitHub environment, which they used to download the company’s code. An investigation confirmed the incident did not involve any customer data or personal information being compromised, nor did it have any impact on customer systems or business operations. The company immediately launched a forensic analysis, identified the source of the credential leak, invalidated the relevant credentials, and deployed additional security measures to better protect its environments. Additionally, Grafana disclosed that the attacker tried to extort a ransom to prevent the code repository from being made public. Ultimately, the company decided to refuse paying the ransom and will release more details from the incident postmortem once the investigation is finished.