Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Grafana Labs

Disclosed May 16, 2026Unverified

Grafana Labs says stolen GitHub token let hackers take its source code

Grafana Labs said attackers used a stolen GitHub access token, one that missed rotation after the TanStack supply-chain attack, to download its source code, and it refused an extortion demand. It found no customer data exposed.

What is known

People affectedNot stated in the sources we have
DisclosedMay 16, 2026
AttackSupply chain
Data exposedSource code
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofTanstack (2026)

Sources

Newstechcrunch.com
Open source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom
Newsbleepingcomputer.com
Grafana says stolen GitHub token let hackers steal codebase

Notices filed

TotalMay 16
ResearchCount not stated

Same campaign

GitHubSupply chain exposed source code, credentials and tokens and API keys.Supply chainTechUSMay 20OpenAITanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chainAIUSUnverifiedMay 14Mistral AITeamPCP offers Mistral AI code repos for sale after TanStack compromiseSupply chainAIFRMay 14
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Grafana Labs