market · May 20, 2026
Grafana Labs Confirms GitHub Token Breach Enabled Codebase Download on May 16, 2026
Share the canonical public link.
Grafana Labs confirmed on May 16, 2026 that an unauthorized party obtained a GitHub access token and downloaded proprietary source code from internal repositories. Grafana Labs conducted forensic analysis, invalidated the compromised token, and added extra security controls while refusing an extortion demand from the attacker. The company stated no customer data or personal information was accessed and no impact occurred to customer systems or operations. Grafana Labs followed FBI guidance against paying ransom because it provides no guarantee of data recovery and offers an incentive for illegal activity. CoinbaseCartel, a data theft and extortion group that emerged in September 2025 with 170 victims, claimed responsibility for the incident.