Grafana Labs admits all its codebase are belong to someone who popped its GitHub account
2026-05-18T07:23:53Z•a5a31f5eb925bf6d8c2fdde5e7c4761fabd7e72176197ef234e72eb135f3dd14
GitHub compromiseGrafana Labscode leakcodebase exfiltrationcredentialsno-customer-data-breachsecurity incidentsupply chain risk
What happened
Grafana Labs confirmed an attacker compromised its GitHub account and downloaded the company’s codebase. Grafana says there was no customer data access, no impact to operations, and no extortion payment. While Grafana reports no evidence of stolen customer information or service disruption, disclosure of source code increases risk of intellectual-property loss and could aid future supply-chain or vulnerability discovery if any sensitive information was present in repositories.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- a5a31f5eb925bf6d8c2fdde5e7c4761fabd7e72176197ef234e72eb135f3dd14
- Enrichment time
- 2026-05-18T07:23:53Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.