CERT24Grafana breach caused by missed token rotation after TanStack attack
The Grafana data breach originated from the TanStack npm supply-chain attack, in which a malicious package was consumed by Grafana’s CI/CD workflow. One GitHub workflow token was missed during token rotation, allowing the attackers to access Grafana’s private GitHub repositories.