PingCap TiDB Leaks
PingCAP, a cloud database provider, suffered a massive data breach resulting in the exfiltration of 10.6 TB of sensitive data, including customer API keys, SQL statements, and internal communications. The attackers claim the breach highlights the company's lack of security visibility and irresponsible handling of customer data.
Why it matters
This incident exposes significant vulnerabilities in cloud infrastructure providers and the potential risks to enterprise clients relying on shared, multi-tenant platforms.
PingCAP Inc. / TiDB Cloud Distributed databases 10.6 TB total exfiltration 200 GB stage one release
10.6 TB total exfil 4,901,203 files 88 consecutive six-hourly exports of the production control plane, undetected ~50 GCP storage buckets a 533.8-million-row BigQuery warehouse 180,046 tenant organisations 403,262 unique emails 115,308 plaintext customer API keys, 42,612 active 20,645,574 customer SQL statements 102,003,766 gateway connections 5,036,738 customer server IPs 377,446 Jira issues 433,928 CRM contacts 92 GB of tenant-tagged AWS cost data 413 private source repos
Today we are making the PingCAP breach public. We possess the complete TiDB Cloud control plane, its billing and finance estate, its GCP storage estate and its AWS cost and billing estate, its Jira, its CRM, its analytics, its source code, and a four-year log of every connection every customer ever made to its product, from the IP addresses of their application servers.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in