Grafana Labs Says Hackers Stole Source Code but Refused Ransom Demand
Grafana Labs confirmed a breach of its GitLab environment through a stolen credential. The company said it refused to pay the ransom and has added security measures.
cbinsights.comGrafana Labs said hackers accessed its GitLab repositories using a stolen token credential. The company stated that the token did not allow access to customer records or financial data. The company invalidated the token and added security measures after the incident.
It said the attackers demanded payment to prevent release of the codebase. Grafana Labs noted that its code is open source and publicly available. The company said it is unclear whether any proprietary information was taken.
The company cited FBI guidance against paying ransomware demands. It said cooperation with attackers does not guarantee that stolen data will be returned or that further demands will not follow. Grafana Labs stated that its investigation is ongoing and that it will share findings once the probe concludes.
The incident occurred after a separate breach at education technology company Instructure, which reached an agreement to pay hackers following repeated network compromises.
Key Facts
Potential Impact
- 01
Grafana Labs added security controls to limit future credential misuse.
- 02
The company plans to publish results of its ongoing investigation.
Transparency Panel
Related Stories
EuronewsWorld Urban Forum 2026 Draws 57,000 Participants from 176 Countries
The 13th World Urban Forum concluded with discussions on housing, climate resilience and urban governance. Organisers reported that the sessions informed future strategic priorities.
theverge.comTrump Mobile website still lists T1 phone as American-made
The product page for the T1 phone continues to describe the device as American-made. The Verge reported that the site may conflict with FTC advertising rules. The phone was announced in June 2025.
France 24EU Discusses Readiness for Artificial Intelligence Changes
A France 24 program examined whether European Union policies can address the effects of artificial intelligence. The discussion covered potential impacts across daily life and economic sectors.