Grafana Labs refuses ransom after hackers steal already-open-source code
The hackers exfiltrated a codebase that was already open source, then demanded payment to keep it from being released. Grafana said no, and cited the FBI’s standing advice. It is the second high-profile extortion case in seven days.
Grafana Labs, the open-source monitoring and visualisation company, disclosed on Monday that hackers had broken into its development environment, exfiltrated a copy of its codebase, and demanded a ransom to prevent the code from being released.
The company said no, and the codebase, on the most awkward fact in the story, is already open source.
The mechanics are the part that matters. Grafana’s own statement on X confirmed that the attackers obtained a stolen token credential, which gave them access to the company’s GitHub environment, which Grafana uses for code development.
The token did not, on the company’s account, provide access to customer records, customer systems, or financial data. The token has...
Copyright of this story solely belongs to thenextweb.com. To see the full text click HERE
