PingCAP Breach Exposes Customer Records and Source Code
PingCAP, the company behind the open-source distributed SQL database TiDB, has confirmed unauthorized access to its internal systems and the theft of source code and customer-related data. The cyber extortion group FulcrumSec claims to have stolen 10.6 TB of data, including TiDB Cloud control-plane records, customer SQL statements, API keys, connection logs, billing information, internal documents, and 413 private source-code repositories.
However, PingCAP's incident report states that there is no evidence that the attacker ran commands or maintained persistent access in the reviewed systems. The breach highlights the risks that cloud providers can inadvertently store sensitive customer data in query histories, support tickets, and diagnostic logs, leaving customers exposed even when their own databases remain uncompromised.
Brief written by urgent.news from InfoQ's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
