Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt

Grafana disclosed that an unauthorized actor used a token to access its GitHub environment and download company code, then attempted to extort the company; Grafana says no customer data or systems were affected, revoked the credentials and implemented additional security measures. External reporting links the claim of responsibility to a data-extortion group (CoinbaseCartel) associated with other extortion ecosystems, but Grafana has not publicly attributed the breach to a known actor.