{"id":18879,"date":"2026-05-21T07:30:32","date_gmt":"2026-05-20T22:30:32","guid":{"rendered":"https:\/\/tomorrowaccess.com\/?p=18879"},"modified":"2026-09-07T10:53:11","modified_gmt":"2026-09-07T01:53:11","slug":"grafana-labs-source-code-stolen-refuses-ransom-en","status":"publish","type":"post","link":"https:\/\/tomorrowaccess.com\/en\/news\/18879","title":{"rendered":"Grafana Labs Refuses Hacker Ransom After Source Code Stolen Through GitHub Token"},"content":{"rendered":"\n<div class=\"wp-block-group is-hidden-front is-layout-constrained wp-container-core-group-is-layout-bc4dd9bf wp-block-group-is-layout-constrained\">\n<p class=\"post-title wp-block-paragraph\">Grafana Labs Refuses Hacker Ransom After Source Code Stolen Through GitHub Token<\/p>\n\n\n\n<p class=\"post-date wp-block-paragraph\">May 19, 2026<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-f56f613f wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><\/div>\n<\/div>\n<\/div>\n\n\n\n<div id=\"post-content\" class=\"wp-block-group content is-post has-medium-font-size is-layout-constrained wp-container-core-group-is-layout-a98c9622 wp-block-group-is-layout-constrained\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1536\" height=\"1024\" src=\"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg\" alt=\"\" class=\"wp-image-18884\" srcset=\"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg 1536w, https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-300x200.jpg 300w, https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-1024x683.jpg 1024w, https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-768x512.jpg 768w, https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-600x400.jpg 600w\" sizes=\"auto, (max-width: 1536px) 100vw, 1536px\" \/><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><br>Grafana Labs, the company behind the widely used open source visualization tool, has confirmed that hackers stole portions of its source code. The company refused to pay the ransom demand that followed.<br><br>The intrusion stemmed from a compromised GitHub token, which the company has since invalidated. The decision puts Grafana in sharp contrast with another recent breach victim that reportedly reached a deal with its attackers.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><br><strong>What Hackers Took and What They Did Not<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">According to Grafana, the attackers used a stolen credential to enter the GitHub environment used for code development. The token granted access to source code repositories. Grafana says there is no evidence that customer records or financial data were accessed. The company has invalidated the credential and added protections.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">The attackers then threatened to publish the codebase unless Grafana paid. The company called the demand blackmail and went public rather than negotiate. Because Grafana&#8217;s core code is already open source, it is unclear how much truly proprietary material the attackers obtained, though the breach of internal development infrastructure remains significant on its own.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><br><strong>Why Grafana Refused to Pay While Instructure Struck a Deal<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Grafana&#8217;s stance stands out against a recent incident at education technology giant Instructure, which TechCrunch reports reached an agreement with attackers who breached its network twice in recent weeks. The terms of that deal, including whether any payment was made, have not been disclosed. That earlier intrusion was followed by a data breach affecting staff and students and a defacement of the company&#8217;s website.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Grafana pointed to long-standing FBI guidance urging breach victims not to pay. Paying does not guarantee that stolen data will be returned or kept private, and it funds future criminal activity. The fact that no evidence of customer data being accessed has surfaced likely made the refusal easier, but the company framed it in terms of industry norms.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><br><strong>Why Source Code Repositories Are an Attractive Target<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Development infrastructure has become an exposed surface even at companies whose software is publicly distributed. Source code repositories often hold configuration files, deployment scripts, and internal-only branches that never appear in public releases, and they can reveal vulnerabilities for later exploitation.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Stolen authentication tokens have become a major risk in modern software development environments. They persist across machines and pipelines, rarely trigger immediate alerts, and can grant access far beyond what an individual employee&#8217;s credentials would. Grafana&#8217;s public disclosure and ransom refusal reinforce a position the security community has pushed for years: paying extortion prolongs the cycle.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><br><strong>What to Watch Next<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Grafana Labs says its investigation is ongoing and that it will share more once the review is complete. It is still unclear whether any truly proprietary material was taken, or whether the attackers will follow through on the threat to publish the codebase. <br><br>Whether the deal Instructure struck with the attackers actually stops further data leaks or additional extortion attempts will also shape how peers approach similar demands.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><br><strong>Sources<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><a href=\"https:\/\/techcrunch.com\/2026\/05\/18\/open-source-tool-maker-grafana-labs-says-hackers-stole-its-code-refuses-to-pay-ransom\/\" target=\"_blank\" rel=\"noopener\">Open source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom (TechCrunch)<\/a><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><a href=\"https:\/\/x.com\/grafana\/status\/2055827123236171827\" target=\"_blank\" rel=\"noopener\">Grafana Labs official X post<\/a><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><a href=\"https:\/\/www.ic3.gov\/\" target=\"_blank\" rel=\"noopener\">FBI Internet Crime Complaint Center (ransomware guidance)<\/a><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><a href=\"https:\/\/techcrunch.com\/2026\/05\/12\/instructure-strikes-deal-with-hackers-who-breached-it-twice\/\" target=\"_blank\" rel=\"noopener\">TechCrunch \/ AP coverage: Instructure Canvas breach and the deal with attackers<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitLab token, then refused to pay a ransom demand, citing FBI guidance.<\/p>\n","protected":false},"author":6,"featured_media":18884,"comment_status":"closed","ping_status":"open","sticky":false,"template":"wp-custom-template-news","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_uag_custom_page_level_css":"","eventcal-data-date-start":"","eventcal-data-date-end":"","eventcal-data-url":"","eventcal-data-place":"","eventcal-data-capacity":"","eventcal-data-ticket":"","eventcal-data-report":"","eventcal-data-note":"","mentoring-company":"","mentoring-position":"","mentoring-name":"","mentoring-url":"","mentoring-text-top":"","mentoring-text-01":"","mentoring-text-02":"","mentoring-text-03":"","mentoring-images":"","mentoring-logo":"","expert-pitch-data-thumbnail":"https:\/\/www.youtube.com\/embed\/M7DlaXKYhLw","expert-pitch-data-youtube":"","expert-pitch-data-date":"2022.03.01 TUE 12:00-13:00","expert-pitch-data-name":"Global Brain, Partner US office \u4e00\u5bae \u7fd4\u5e73\u6c0f","expert-pitch-data-excerpt":"\u91d1\u878d\u5e02\u5834\u304c\u5927\u304d\u304f\u5909\u308f\u308d\u3046\u3068\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u308c\u307e\u3067\u306f\u65e7\u6765\u306e\u9280\u884c\u304c\u307b\u307c\u5168\u3066\u306e\u6a5f\u80fd\u3092\u6301\u3063\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u304a\u91d1\u3092\u8caf\u3081\u308b\u3001\u9001\u91d1\u3059\u308b\u3001\u6c7a\u6e08\u3059\u308b\u3001\u306a\u3069\u306e\u6a5f\u80fd\u304c\u7d30\u5206\u5316\u3057\u3066\u3001\u3055\u307e\u3056\u307e\u306a\u4eba\u304c\u500b\u3005\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u63d0\u4f9b\u3067\u304d\u308b\u6642\u4ee3\u306b\u306a\u308a\u307e\u3057\u305f\u3002 \u3055\u3089\u306bAI\u306e\u6280\u8853\u3084\u81a8\u5927\u306a\u91cf\u3092\u51e6\u7406\u3067\u304d\u308b\u6280\u8853\u3001\u30d6\u30ed\u30c3\u30af\u30c1\u30a7\u30fc\u30f3\u6280\u8853\u306a\u3069\u3082\u6210\u719f\u3057\u3066\u304d\u305f\u3053\u3068\u3082\u3042\u308a\u3001\u305d\u306e\u52d5\u304d\u306f\u52a0\u901f\u3057\u3066\u3044\u307e\u3059\u3002 \u52d5\u304d\u304c\u6fc0\u3057\u3044\u30d5\u30a3\u30f3\u30c6\u30c3\u30af\u306b\u3064\u3044\u3066\u3001\u6295\u8cc7\u304c\u6d3b\u767a\u3067\u3001\u4eca\u5e74\u306f\u30b0\u30ed\u30fc\u30d0\u30eb\u6295\u8cc7\u3068Fintech\u306a\u3069\u306b\u3082\u6ce8\u529b\u3055\u308c\u3066\u3044\u304fGlobal Brain Partner \u4e00\u5bae\u6c0f\u3068\u6700\u65b0\u60c5\u5831\u3092\u304a\u5c4a\u3051\u3057\u307e\u3059\u3002","expert-pitch-data-download-file":"","expert-pitch-data-peatix":"","expert-pitch-data-whitepaper-show":false,"common-label-text":"","_locale":"en_US","_original_post":"https:\/\/tomorrowaccess.com\/?p=18879","footnotes":""},"categories":[16],"tags":[298,851,852],"class_list":["post-18879","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-cybersecurity","tag-open-source","tag-ransomware","en-US"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Grafana Labs Refuses Ransom After GitHub Token Breach<\/title>\n<meta name=\"description\" content=\"Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitHub token, then refused to pay a ransom demand, citing FBI guidance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tomorrowaccess.com\/en\/news\/18879\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Grafana Labs Refuses Ransom After GitHub Token Breach\" \/>\n<meta property=\"og:description\" content=\"Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitHub token, then refused to pay a ransom demand, citing FBI guidance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tomorrowaccess.com\/en\/news\/18879\" \/>\n<meta property=\"og:site_name\" content=\"Tomorrow Access\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TomorrowAccess\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-20T22:30:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-07T01:53:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Midori\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@TomorrowAccess\" \/>\n<meta name=\"twitter:site\" content=\"@TomorrowAccess\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879\"},\"author\":{\"name\":\"Midori\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#\\\/schema\\\/person\\\/66679544aecec65ea328a5a75a2e1d36\"},\"headline\":\"Grafana Labs Refuses Hacker Ransom After Source Code Stolen Through GitHub Token\",\"datePublished\":\"2026-05-20T22:30:32+00:00\",\"dateModified\":\"2026-09-07T01:53:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879\"},\"wordCount\":556,\"publisher\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/tomorrowaccess.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/grafana-labs-source-code-stolen-refuses-ransom.jpg\",\"keywords\":[\"Cybersecurity\",\"Open Source\",\"Ransomware\"],\"articleSection\":[\"news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879\",\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879\",\"name\":\"Grafana Labs Refuses Ransom After GitHub Token Breach\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/tomorrowaccess.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/grafana-labs-source-code-stolen-refuses-ransom.jpg\",\"datePublished\":\"2026-05-20T22:30:32+00:00\",\"dateModified\":\"2026-09-07T01:53:11+00:00\",\"description\":\"Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitHub token, then refused to pay a ransom demand, citing FBI guidance.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#primaryimage\",\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/grafana-labs-source-code-stolen-refuses-ransom.jpg\",\"contentUrl\":\"https:\\\/\\\/tomorrowaccess.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/grafana-labs-source-code-stolen-refuses-ransom.jpg\",\"width\":1536,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/news\\\/18879#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u30db\u30fc\u30e0\",\"item\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Grafana Labs Refuses Hacker Ransom After Source Code Stolen Through GitHub Token\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#website\",\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/\",\"name\":\"Tomorrow Access\",\"description\":\"Tomorrow Access Homepage\",\"publisher\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/tomorrowaccess.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#organization\",\"name\":\"Tomorrow Access\",\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/ta-ogp.jpg\",\"contentUrl\":\"https:\\\/\\\/tomorrowaccess.com\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/ta-ogp.jpg\",\"width\":2400,\"height\":1260,\"caption\":\"Tomorrow Access\"},\"image\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/TomorrowAccess\",\"https:\\\/\\\/x.com\\\/TomorrowAccess\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/tomorrow-access\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCz2iUaHKT-gK0ijM0_iFDeA\"],\"legalName\":\"Tomorrow Access LLC\",\"alternateName\":[\"\u30c8\u30a5\u30e2\u30ed\u30fc\u30a2\u30af\u30bb\u30b9\",\"Tomorrow Access LLC\"],\"description\":\"Silicon Valley-based consulting firm supporting Japanese companies with U.S. expansion, new business development and corporate venture capital (CVC), and mentoring startups.\",\"foundingDate\":\"2021\",\"slogan\":\"BUILD YOUR OWN PATH\",\"address\":{\"@type\":\"PostalAddress\",\"addressRegion\":\"CA\",\"addressCountry\":\"US\"},\"areaServed\":[{\"@type\":\"Country\",\"name\":\"United States\"},{\"@type\":\"Country\",\"name\":\"Japan\"}],\"knowsLanguage\":[\"ja\",\"en\"],\"knowsAbout\":[\"Silicon Valley\",\"U.S. market entry for Japanese companies\",\"Corporate venture capital (CVC)\",\"New business development\",\"Startup investment\",\"Startup mentoring\"],\"founder\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#\\\/schema\\\/person\\\/ken-sobajima\"},\"contactPoint\":{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/en\\\/contact\",\"availableLanguage\":[\"ja\",\"en\"]}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#\\\/schema\\\/person\\\/66679544aecec65ea328a5a75a2e1d36\",\"name\":\"Midori\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/36be2b539d4f0de2cd48caf8afe293323f2e42761b537cfcc4afba92c67c8d8a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/36be2b539d4f0de2cd48caf8afe293323f2e42761b537cfcc4afba92c67c8d8a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/36be2b539d4f0de2cd48caf8afe293323f2e42761b537cfcc4afba92c67c8d8a?s=96&d=mm&r=g\",\"caption\":\"Midori\"},\"url\":\"https:\\\/\\\/tomorrowaccess.com\\\/news\\\/author\\\/midori\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#\\\/schema\\\/person\\\/ken-sobajima\",\"name\":\"Ken Sobajima\",\"alternateName\":\"\u508d\u5cf6 \u5065\u53cb\",\"jobTitle\":\"Founder & CEO\",\"worksFor\":{\"@id\":\"https:\\\/\\\/tomorrowaccess.com\\\/#organization\"},\"description\":\"Founder & CEO of Tomorrow Access. 25 years at a major Japanese telecom, including heading U.S. investments for its corporate venture fund; based in Silicon Valley since 2015.\",\"award\":[\"Global Corporate Venturing Rising Stars 2019\",\"Global Corporate Venturing Top 50 Emerging Leaders 2021\"],\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/sobazy\\\/\"],\"knowsLanguage\":[\"ja\",\"en\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Grafana Labs Refuses Ransom After GitHub Token Breach","description":"Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitHub token, then refused to pay a ransom demand, citing FBI guidance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tomorrowaccess.com\/en\/news\/18879","og_locale":"en_US","og_type":"article","og_title":"Grafana Labs Refuses Ransom After GitHub Token Breach","og_description":"Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitHub token, then refused to pay a ransom demand, citing FBI guidance.","og_url":"https:\/\/tomorrowaccess.com\/en\/news\/18879","og_site_name":"Tomorrow Access","article_publisher":"https:\/\/www.facebook.com\/TomorrowAccess","article_published_time":"2026-05-20T22:30:32+00:00","article_modified_time":"2026-09-07T01:53:11+00:00","og_image":[{"width":1536,"height":1024,"url":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg","type":"image\/jpeg"}],"author":"Midori","twitter_card":"summary_large_image","twitter_creator":"@TomorrowAccess","twitter_site":"@TomorrowAccess","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#article","isPartOf":{"@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879"},"author":{"name":"Midori","@id":"https:\/\/tomorrowaccess.com\/#\/schema\/person\/66679544aecec65ea328a5a75a2e1d36"},"headline":"Grafana Labs Refuses Hacker Ransom After Source Code Stolen Through GitHub Token","datePublished":"2026-05-20T22:30:32+00:00","dateModified":"2026-09-07T01:53:11+00:00","mainEntityOfPage":{"@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879"},"wordCount":556,"publisher":{"@id":"https:\/\/tomorrowaccess.com\/#organization"},"image":{"@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#primaryimage"},"thumbnailUrl":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg","keywords":["Cybersecurity","Open Source","Ransomware"],"articleSection":["news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879","url":"https:\/\/tomorrowaccess.com\/en\/news\/18879","name":"Grafana Labs Refuses Ransom After GitHub Token Breach","isPartOf":{"@id":"https:\/\/tomorrowaccess.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#primaryimage"},"image":{"@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#primaryimage"},"thumbnailUrl":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg","datePublished":"2026-05-20T22:30:32+00:00","dateModified":"2026-09-07T01:53:11+00:00","description":"Grafana Labs disclosed a breach in which hackers stole source code via a compromised GitHub token, then refused to pay a ransom demand, citing FBI guidance.","breadcrumb":{"@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tomorrowaccess.com\/en\/news\/18879"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#primaryimage","url":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg","contentUrl":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg","width":1536,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/tomorrowaccess.com\/en\/news\/18879#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u30db\u30fc\u30e0","item":"https:\/\/tomorrowaccess.com\/en\/"},{"@type":"ListItem","position":2,"name":"Grafana Labs Refuses Hacker Ransom After Source Code Stolen Through GitHub Token"}]},{"@type":"WebSite","@id":"https:\/\/tomorrowaccess.com\/#website","url":"https:\/\/tomorrowaccess.com\/","name":"Tomorrow Access","description":"Tomorrow Access Homepage","publisher":{"@id":"https:\/\/tomorrowaccess.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tomorrowaccess.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/tomorrowaccess.com\/#organization","name":"Tomorrow Access","url":"https:\/\/tomorrowaccess.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tomorrowaccess.com\/#\/schema\/logo\/image\/","url":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2022\/10\/ta-ogp.jpg","contentUrl":"https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2022\/10\/ta-ogp.jpg","width":2400,"height":1260,"caption":"Tomorrow Access"},"image":{"@id":"https:\/\/tomorrowaccess.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/TomorrowAccess","https:\/\/x.com\/TomorrowAccess","https:\/\/www.linkedin.com\/company\/tomorrow-access","https:\/\/www.youtube.com\/channel\/UCz2iUaHKT-gK0ijM0_iFDeA"],"legalName":"Tomorrow Access LLC","alternateName":["\u30c8\u30a5\u30e2\u30ed\u30fc\u30a2\u30af\u30bb\u30b9","Tomorrow Access LLC"],"description":"Silicon Valley-based consulting firm supporting Japanese companies with U.S. expansion, new business development and corporate venture capital (CVC), and mentoring startups.","foundingDate":"2021","slogan":"BUILD YOUR OWN PATH","address":{"@type":"PostalAddress","addressRegion":"CA","addressCountry":"US"},"areaServed":[{"@type":"Country","name":"United States"},{"@type":"Country","name":"Japan"}],"knowsLanguage":["ja","en"],"knowsAbout":["Silicon Valley","U.S. market entry for Japanese companies","Corporate venture capital (CVC)","New business development","Startup investment","Startup mentoring"],"founder":{"@id":"https:\/\/tomorrowaccess.com\/#\/schema\/person\/ken-sobajima"},"contactPoint":{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/tomorrowaccess.com\/en\/contact","availableLanguage":["ja","en"]}},{"@type":"Person","@id":"https:\/\/tomorrowaccess.com\/#\/schema\/person\/66679544aecec65ea328a5a75a2e1d36","name":"Midori","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/36be2b539d4f0de2cd48caf8afe293323f2e42761b537cfcc4afba92c67c8d8a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/36be2b539d4f0de2cd48caf8afe293323f2e42761b537cfcc4afba92c67c8d8a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/36be2b539d4f0de2cd48caf8afe293323f2e42761b537cfcc4afba92c67c8d8a?s=96&d=mm&r=g","caption":"Midori"},"url":"https:\/\/tomorrowaccess.com\/news\/author\/midori"},{"@type":"Person","@id":"https:\/\/tomorrowaccess.com\/#\/schema\/person\/ken-sobajima","name":"Ken Sobajima","alternateName":"\u508d\u5cf6 \u5065\u53cb","jobTitle":"Founder & CEO","worksFor":{"@id":"https:\/\/tomorrowaccess.com\/#organization"},"description":"Founder & CEO of Tomorrow Access. 25 years at a major Japanese telecom, including heading U.S. investments for its corporate venture fund; based in Silicon Valley since 2015.","award":["Global Corporate Venturing Rising Stars 2019","Global Corporate Venturing Top 50 Emerging Leaders 2021"],"sameAs":["https:\/\/www.linkedin.com\/in\/sobazy\/"],"knowsLanguage":["ja","en"]}]}},"uagb_featured_image_src":{"full":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg",1536,1024,false],"thumbnail":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-150x150.jpg",150,150,true],"medium":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-300x200.jpg",300,200,true],"medium_large":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-768x512.jpg",768,512,true],"large":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom-1024x683.jpg",1024,683,true],"1536x1536":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg",1536,1024,false],"2048x2048":["https:\/\/tomorrowaccess.com\/wp-content\/uploads\/2026\/05\/grafana-labs-source-code-stolen-refuses-ransom.jpg",1536,1024,false]},"uagb_author_info":{"display_name":"Midori","author_link":"https:\/\/tomorrowaccess.com\/news\/author\/midori"},"uagb_comment_info":0,"uagb_excerpt":"Grafana Labs disclosed a breach in which hackers stole &hellip;","_links":{"self":[{"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/posts\/18879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/comments?post=18879"}],"version-history":[{"count":1,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/posts\/18879\/revisions"}],"predecessor-version":[{"id":21653,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/posts\/18879\/revisions\/21653"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/media\/18884"}],"wp:attachment":[{"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/media?parent=18879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/categories?post=18879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tomorrowaccess.com\/wp-json\/wp\/v2\/tags?post=18879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}