Grafana Source Code Stolen via Compromised GitHub Access Token

Grafana Labs confirmed that hackers exfiltrated its source code after breaching the company’s GitHub environment using a stolen access token. The attackers issued a ransom demand, which Grafana declined to pay, and disclosed the incident publicly over the weekend. The compromised token provided broad read access to Grafana’s repositories, enabling bulk code exfiltration. No customer data or production systems appear directly affected, but source code exposure from a widely-deployed monitoring platform creates risk of targeted vulnerability research and supply chain attack construction. Organizations running self-hosted Grafana should monitor for unexpected patches issued outside normal release cycles and review any third-party integrations using Grafana API tokens.