Grafana Labs Security Breach – Hackers Access GitHub and Download Codebase

Grafana Labs disclosed that an attacker leveraged a misconfigured GitHub Action triggered on pull_request_target to steal a privileged token, exfiltrate multiple private repositories (the company’s codebase), and attempt extortion; Grafana invalidated credentials, removed the vulnerable workflow, disabled public workflows, and reported no evidence of customer data or system impact.