CoinbaseCartel Claims It Targeted Grafana in Ransomware Post

Summary
ransomware[.]live reports that CoinbaseCartel claimed to have targeted Grafana and threatened further damage. The post says the claim is unconfirmed.
Key points
- The monitoring post names Grafana as the claimed U.S. victim and CoinbaseCartel as the actor.
- CoinbaseCartel allegedly threatened further damage and urged Grafana to make contact.
- The claim is attributed to a leak-site listing and ransomware[.]live monitoring; the post says it cannot confirm the information.
Article Details
- Victim
- Grafana
- Claim Date
- 2026-05-15
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Not disclosed
- Ransom Demand
- Not disclosed
- Leak Status
- A claim was published; the source says it cannot confirm the claim's accuracy.
