logo

Grafana refuses to pay ransom after codebase theft

ID: 3ccd6e0d-8f0b-5121-8576-10626b1946e3

STIX ID: report--3ccd6e0d-8f0b-5121-8576-10626b1946e3

Feed Name: The Record from Recorded Future News

Threat Score
70/100

Date Published: 2026-05-18

Date Updated: 2026-05-18

...
...

Grafana Labs confirmed that an unauthorized party used a leaked token to access their GitHub environment and download the company's codebase; the extortion group CoinbaseCartel claimed responsibility. Grafana says no customer data or system impact was found, compromised credentials were revoked, and they refused to pay the ransom.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.