[Grafana Labs Discloses GitHub Environment Security Incident, States Customer Data Unaffected and Refuses to Pay Ransom] Open-source data visualization tool Grafana posted on the X platform, revealing that it recently discovered an unauthorized party had accessed a token for its Grafana Labs GitHub environment, allowing the threat actor to download its code repositories. The company’s investigation determined that no customer data or personal information was accessed during the incident, nor was there any impact on customer systems or operations. The company immediately initiated forensic analysis and believes it has identified the source of the credential leak. Grafana has since invalidated the compromised credentials and implemented additional security measures. The attacker attempted to extort the company, demanding a ransom to prevent the release of the code repositories. Based on operational experience and the FBI's public stance (paying ransom does not guarantee data recovery and only incentivizes further illegal activities), Grafana has decided not to pay the ransom.