TLDR Tech / InfoSec
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
An attacker used a stolen token to access Grafana's GitHub environment and download its codebase, then demanded payment to keep the data private. Grafana invalidated the credentials, added extra security controls, and refused to pay. Reports link the extortion attempt to the CoinbaseCartel group, which focuses on data theft and extortion across multiple sectors.
Read the full story