CERT24Grafana GitHub token leak led to codebase download and extortion attempt
Grafana disclosed that an unauthorized party obtained a token that allowed access to the company’s GitHub environment and download of its codebase. Grafana said that no customer data or personal information was accessed and that no impact to customer systems or operations was identified. The attacker demanded payment to prevent publication of the stolen database.