PingCAP 确认在被盗凭证访问其内部系统后 TiDB Cloud 数据被暴露
9月至10月的入侵暴露了账户、SQL 编辑器和账单记录；另有攻击者声称窃取了 10.6 TB 数据并包含明文 API 密钥，但该说法尚未得到证实。
By Ryan Merket · Published
Primary source: X
为何重要
PingCAP 已确认其托管数据库服务中的客户和业务记录被泄露，而攻击者所声称的更大规模数据量及明文密钥的说法仍未得到证实。对具体客户的影响仍在评估中。
PingCAP said an intruder used stolen service-account credentials to access internal systems and copy data and source code between September 9th and October 7th, confirming exposure of TiDB Cloud customer records while disputing key parts of an extortion group’s account. The company published its incident report on October 19th; Sam Lambert, who says he is building at PlanetScale, called it “The TiDB leaks” in a thread on X, adding that he had warned people this would happen.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.