Grafana GitHub Token Breach: Codebase Downloaded, Extortion Attempted

An unauthorized party obtained a GitHub token granting access to Grafana’s GitHub environment and downloaded the company’s full codebase. The attacker subsequently attempted extortion. Grafana states no customer data or personal information was accessed and there is no evidence of impact to customer systems. The incident is a textbook developer-token exposure scenario — a single compromised token with broad repository access enabled a full source code exfiltration. Grafana is a widely deployed open source observability platform; the codebase download creates latent supply chain risk if vulnerabilities are discovered and exploited before patches can be issued. Review and rotate any long-lived GitHub tokens with org-wide repository access.