PingCAP confirms TiDB Cloud data exposure after stolen credentials accessed internal systems
The September-October intrusion exposed account, SQL-editor and billing records; a separate attacker claim of 10.6 TB stolen and plaintext API keys remains unverified.
By Ryan Merket · Published
Primary source: X
Why it matters
PingCAP confirmed exposure of customer and business records in its managed database service, while the attacker’s much larger totals and plaintext-key claim remain unverified. Customer-specific impact is still being determined.
PingCAP said an intruder used stolen service-account credentials to access internal systems and copy data and source code between September 9th and October 7th, confirming exposure of TiDB Cloud customer records while disputing key parts of an extortion group’s account. The company published its incident report on October 19th; Sam Lambert, who says he is building at PlanetScale, called it “The TiDB leaks” in a thread on X, adding that he had warned people this would happen.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.