// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Grafana Labs
Breach Record

Grafana Labs

DISCLOSED 2026-05-16 · SUPPLY CHAIN · RANSOMWARE

Grafana Labs confirmed a targeted ransomware attack on May 16, 2026, originating from a compromised npm package in the TanStack supply chain. The incident was carried out by a cybercrime group. Details on data exposure and specific threat actor are not provided.

The record

What we know

Disclosed
2026-05-16
Attack vector
Supply Chain
Sector
technology
Domain
grafana.com
RANSOMWARE
Sources

Cited reporting

↗ grafana.com (2026-05-19)
Similar vector · recent

Other supply chain breaches on file

Melbourne International Film Festival · 2026-06-01 Charter Communications · 2026-05-31 Oncology Institute · 2026-05-29 Oncology Institute · 2026-05-28 Trump Mobile · 2026-05-28 Oncology Institute · 2026-05-27 The Oncology Institute · 2026-05-26 Oncology Institute · 2026-05-25

This page is the permanent ColdRecon entry for the Grafana Labs disclosure. It updates if new public reporting emerges. All tracked breaches →

Grafana Labs just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →