PingCAP
Security incidents tagged PingCAP. Newest first.
- Incidents
- 1
- Live
- 1
- Patched
- 0
- Days without an incident
- 0
- Longest quiet run: 27 days (Sep 10–Oct 6)
Show 1 older incident1 older incident
September 2026 1
- HighPartly patched
PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken
PingCAP confirmed that between Sep 9 and Oct 7 2026 an unauthorized party used stolen service-account credentials to access internal systems, copy data and obtain source code. Exported records included TiDB Cloud user names/emails, org/project associations, SQL-editor text, billing/contract data and an encrypted API-key table. Extortion group FulcrumSec claims 10.6 TB and 115k plaintext API keys; those figures are unverified and PingCAP disputes the API-key claim. No evidence data stored in TiDB was affected.
PingCAP TiDB Cloud (hosted database platform)Since Sep 9, 2026
1 PingCAP incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
