Open source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom | TechCrunch

"Grafana Labs, the maker of its eponymous popular open source web visualization software, confirmed it had been hacked but that it refused to pay the hackers who had threatened to release the company's codebase. In a series of posts on social media, the lab said its investigation found that the hackers had abused a stolen token credential that allowed access to the company's GitLab environment, which it uses for code development. The token did not provide access to customer records or financial data, but allowed the hackers to obtain the company's repositories of source code."

"The company has since invalidated the token and added additional security measures to prevent a repeat incident. "The attacker attempted to blackmail us, demanding payment to prevent the release of our codebase," the company said. Grafana's code is open source and public, meaning anyone can download the software and edit its code before running it on their own machines. It's unclear if the hackers stole any proprietary code or information."

"While in Grafana's case, no customer data was taken, the company cited the FBI's long-standing advice urging victims not to pay hackers, as cooperating with hackers does not guarantee that they would return stolen data or refrain from publishing it later. Critics also say paying cybercriminals helps to fund future cyberattacks. Grafana said its investigation was ongoing and will share its findings once its probe concludes."

Grafana Labs confirmed it was hacked and that it refused to pay hackers who threatened to release its codebase. The investigation found the attackers abused a stolen token credential that provided access to Grafana’s GitLab environment used for code development. The token did not grant access to customer records or financial data, but it enabled the hackers to obtain the company’s source code repositories. Grafana invalidated the token and added additional security measures to reduce the risk of a repeat incident. Grafana stated the attackers attempted blackmail by demanding payment to prevent release of the codebase. The company noted that its code is open source and public, and it said its investigation was ongoing.

Read at TechCrunch