PingCAP Responds to TiDB Cloud Data Breach: Some Internal Operational Data Accessed Without Authorization

Odaily reports that according to a post by SlowMist CISO @im23pds, the extortion/disclosure group FulcrumSec has publicly claimed to have continuously stolen approximately 10.6 TB of data from PingCAP's managed database service TiDB Cloud, and has released about 200GB of first-stage samples.

On the same day, PingCAP issued a statement acknowledging that "some internal operational data" was accessed without authorization, but emphasized that no product vulnerabilities were involved and that the security of customer databases and business data would not be affected. Companies such as Bitget and Baidu have previously collaborated with this data company.