Now Hacked
EN
Data breach

Grafana Labs source code stolen via compromised GitHub token

First reported · Last reported · 7 related reports

An attacker obtained a Grafana Labs GitHub access token, downloaded its codebase and demanded money in exchange for not publishing it. A failure to rotate tokens after the TanStack npm attack was identified as the cause of the breach. Grafana Labs revoked the token and refused to pay, saying no access to customer data or damage to customer systems had been identified.

Key facts

Affected organization
Grafana Labs
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Leak of the company's codebase
Cause / method
Abuse of a GitHub access token that was not rotated after the TanStack npm attack
Location
United States

If your data was exposed

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. It was reported that Grafana Labs' codebase had been downloaded through a compromised GitHub token and that a ransom demand had been made.
  2. Grafana Labs said it had revoked the token and refused to pay, explaining that no access to customer data or damage to customer systems had been identified.
  3. A failure to rotate GitHub tokens after the TanStack npm attack was identified as the cause of the breach.

7 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.