Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt

Grafana disclosed unauthorized access to its GitHub resulted in codebase download and extortion attempt.

• •Unauthorized party obtained GitHub token to access Grafana's codebase
• •No customer data or personal information was accessed in the incident
• •Attacker demanded ransom but Grafana refused following FBI guidance
• •Cybercrime group CoinbaseCartel claimed responsibility, emerged in September 2025
• •CoinbaseCartel is a data extortion crew with 170+ victims across multiple industries

This summary was automatically generated by AI based on the original article and may not be fully accurate.