From RuntimeWire · RuntimeWire · · 40s
PingCAP Confirms TiDB Cloud Data Exposure
PingCAP says stolen credentials accessed internal systems, exposing customer data.
In brief
PingCAP says stolen credentials accessed internal systems, exposing customer data. PingCAP confirmed customer records exposed after stolen credentials accessed internal systems from September 9 to October 7. Originally reported by RuntimeWire.
PingCAP Confirms Data Exposure
PingCAP confirmed exposure of customer and business records in its managed database service after stolen service-account credentials accessed internal systems.
Attack Timeline
An intruder used stolen credentials to copy data and source code between September 9th and October 7th, confirming exposure while disputing extortion group claims.
Public Response

Sam Lambert, who says he is building at PlanetScale, called the incident 'The TiDB leaks' after PingCAP published its incident report on October 19th.
“The TiDB leaks”
What it means
PingCAP confirmed customer records exposed after stolen credentials accessed internal systems from September 9 to October 7.





