pwn.watch: TiDB incident updates https://pwn.watch/t/tidb Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken: PingCAP Japan adds support-ticket information to the list of exposed data. https://pwn.watch/i/pingcap-tidb-cloud-breach pingcap-tidb-cloud-breach:2026-10-21:PingCAP Japan adds support-ticket information to the list of exposed data. Wed, 21 Oct 2026 00:00:00 GMT high Source: https://pingcap.co.jp/trust-hub/security/security-update-october-2026/ Status: live, partial [high] PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken: FulcrumSec goes public with claims (10.6 TB, 180k orgs, 115k API keys) and a ~200 GB sample; Bitget says it held only public trade logs there. https://pwn.watch/i/pingcap-tidb-cloud-breach pingcap-tidb-cloud-breach:2026-10-20:FulcrumSec goes public with claims (10.6 TB, 180k orgs, 115k API keys) and a ~200 GB sample; Bitget says it held only public trade logs there. Tue, 20 Oct 2026 00:00:00 GMT high Source: https://cryptobriefing.com/bitget-no-user-data-tidb-cloud-breach/ Status: live, partial [high] PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken: PingCAP publishes incident report; Japan notice cites up to ~50,000 personal records. https://pwn.watch/i/pingcap-tidb-cloud-breach pingcap-tidb-cloud-breach:2026-10-19:PingCAP publishes incident report; Japan notice cites up to ~50,000 personal records. Mon, 19 Oct 2026 00:00:00 GMT high Source: https://pingcap.co.jp/trust-hub/security/security-update-october-2026/ Status: live, partial [high] PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken: All identified compromised credentials invalidated and access paths blocked; four vulnerabilities found by IR firm fixed. https://pwn.watch/i/pingcap-tidb-cloud-breach pingcap-tidb-cloud-breach:2026-10-14:All identified compromised credentials invalidated and access paths blocked; four vulnerabilities found by IR firm fixed. Wed, 14 Oct 2026 00:00:00 GMT high Source: https://www.pingcap.com/trust-hub/security/security-update-october-2026/ Status: live, partial [high] PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken: PingCAP detects the intrusion and starts disabling credentials. https://pwn.watch/i/pingcap-tidb-cloud-breach pingcap-tidb-cloud-breach:2026-10-07:PingCAP detects the intrusion and starts disabling credentials. Wed, 07 Oct 2026 00:00:00 GMT high Source: https://www.pingcap.com/trust-hub/security/security-update-october-2026/ Status: live, partial [high] PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken: Unauthorized access with stolen service-account credentials begins. https://pwn.watch/i/pingcap-tidb-cloud-breach pingcap-tidb-cloud-breach:2026-09-09:Unauthorized access with stolen service-account credentials begins. Wed, 09 Sep 2026 00:00:00 GMT high Source: https://www.pingcap.com/trust-hub/security/security-update-october-2026/ Status: live, partial