Grafana Labs Says Hackers Stole Source Code but Refused Ransom Demand

Grafana Labs said hackers accessed its GitLab repositories using a stolen token credential. The company stated that the token did not allow access to customer records or financial data. The company invalidated the token and added security measures after the incident.

It said the attackers demanded payment to prevent release of the codebase. Grafana Labs noted that its code is open source and publicly available. The company said it is unclear whether any proprietary information was taken.

The company cited FBI guidance against paying ransomware demands. It said cooperation with attackers does not guarantee that stolen data will be returned or that further demands will not follow. Grafana Labs stated that its investigation is ongoing and that it will share findings once the probe concludes.

The incident occurred after a separate breach at education technology company Instructure, which reached an agreement to pay hackers following repeated network compromises.