Grafana discloses encounter with GitHub security incident, hackers steal code repository and carry out extortion

robot
Abstract generation in progress

Golden Finance reports that on May 18th, the open-source data visualization tool Grafana posted on X platform stating that they recently discovered an unauthorized attacker obtained a token that grants access to the Grafana Labs GitHub environment, and used it to download the company’s code repository.
After investigation, it was confirmed that this incident did not involve customer data or personal information leaks, nor was there any impact on customer systems or business operations.
The company has immediately initiated forensic analysis and believes it has identified the source of the credential leak; the relevant credentials have now been invalidated, and additional security measures have been deployed to strengthen environment protection.
In addition, Grafana disclosed that the attacker had attempted to demand ransom to prevent the code repository from being made public, but the company ultimately decided to refuse to pay the ransom and will release more incident review information after the investigation concludes.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned