Open source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom

Grafana Labs, renowned for its open-source web visualization software, has confirmed that it fell victim to a cyber attack but has chosen not to comply with the hackers' ransom demands. The company revealed this information through a series of social media updates, detailing how the attackers exploited a stolen token credential to gain unauthorized access to its GitLab environment, which is vital for code development. While the compromised token did not grant access to sensitive customer data or financial records, it did allow the hackers to access Grafana's source code repositories. In response to the breach, Grafana Labs has promptly invalidated the token and implemented enhanced security protocols to prevent future incidents. In their statement, the company highlighted the attackers' attempt to extort them by threatening to release the company's codebase unless a ransom was paid. Given that Grafana's code is open source, it is publicly accessible, allowing anyone to download and modify it. However, it remains uncertain if any proprietary code was extracted during the breach. The situation stands in stark contrast to a recent incident involving education technology company Instructure, which opted to pay a ransom after suffering multiple breaches. Instructure faced threats of data leaks pertaining to staff and students, leading to its decision to negotiate with the hackers. Grafana emphasized its commitment to following the FBI's guidance, which advises against paying ransoms, as doing so may not guarantee the recovery of stolen data and could encourage further cybercrime. The investigation into the breach is ongoing, and Grafana plans to disclose its findings once the inquiry is complete.