PingCAP Confirms TiDB Cloud Data Exposure

PingCAP says stolen credentials accessed internal systems, exposing customer data.

By ·

Oct 21, 2026

3 cards · 40s · tap to begin

From · · · 40s

PingCAP Confirms TiDB Cloud Data Exposure

PingCAP says stolen credentials accessed internal systems, exposing customer data.

In brief

PingCAP says stolen credentials accessed internal systems, exposing customer data. PingCAP confirmed customer records exposed after stolen credentials accessed internal systems from September 9 to October 7. Originally reported by RuntimeWire.

PingCAP Confirms Data Exposure

PingCAP confirmed exposure of customer and business records in its managed database service after stolen service-account credentials accessed internal systems.

Attack Timeline

An intruder used stolen credentials to copy data and source code between September 9th and October 7th, confirming exposure while disputing extortion group claims.

Public Response

Public Response

Sam Lambert, who says he is building at PlanetScale, called the incident 'The TiDB leaks' after PingCAP published its incident report on October 19th.

“The TiDB leaks”

What it means

PingCAP confirmed customer records exposed after stolen credentials accessed internal systems from September 9 to October 7.

Read the original on RuntimeWire

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on pingcap and related topics.