# PingCAP Confirms TiDB Cloud Data Exposure

> PingCAP says stolen credentials accessed internal systems, exposing customer data.
- Title: PingCAP Confirms TiDB Cloud Data Exposure · RuntimeWire
- Summary: PingCAP says stolen credentials accessed internal systems, exposing customer data. PingCAP confirmed customer records exposed after stolen credentials…
- Keywords: pingcap, tidb, cloud, data, exposure, credentials, security, internal systems, technology, Confirms, RuntimeWire
- Source: RuntimeWire — https://runtimewire.com/article/pingcap-tidb-cloud-data-exposure-stolen-credentials
- Author: RuntimeWire
- Published: 2026-10-21T07:10:49.311+00:00
- Read time: 1 min
- Topics: pingcap, tidb, cloud, data, exposure, credentials, security, internal systems, technology, ai
## PingCAP Confirms Data Exposure
PingCAP confirmed exposure of customer and business records in its managed database service after stolen service-account credentials accessed internal systems.
## Attack Timeline
An intruder used stolen credentials to copy data and source code between September 9th and October 7th, confirming exposure while disputing extortion group claims.
## Public Response
Sam Lambert, who says he is building at PlanetScale, called the incident 'The TiDB leaks' after PingCAP published its incident report on October 19th.

> The TiDB leaks
## Key takeaway

PingCAP confirmed customer records exposed after stolen credentials accessed internal systems from September 9 to October 7.