Grafana says hackers have accessed its GitHub environment and demanded a ransom to prevent the release of its codebase; Grafana refused to pay

Grafana just confirmed that an unauthorized party got their hands on a token granting access to the company's GitHub environment. The intruder used it to download Grafana's entire codebase.

Then came the shakedown. The hackers demanded a ransom, threatening to publicly release the stolen code if Grafana didn't pay up.

Grafana said no.

The company disclosed the breach publicly rather than caving to extortion demands. It's a move that tracks with growing industry consensus: paying ransoms rarely ends well and only incentivizes more attacks.

The breach raises serious questions about token security and access management in GitHub environments — a vector that's become increasingly popular among attackers targeting developer infrastructure. Grafana hasn't disclosed the full scope of the compromise or how the token was initially obtained.