🚨 PingCAP's TiDB Cloud breach raises some serious questions.
FulcrumSec claims it ran a data collection pipeline every 6 hours for 22 days, allegedly stealing massive amounts of customer data.
The confirmed exposure includes customer metadata, SQL editor history, billing records, encrypted API key values and source code.
PingCAP says there's no evidence TiDB production data was impacted. The alleged 10.6 TB haul and the attacker's collection method remain unverified.
The real concern? Your production database can be untouched while the control plane managing it gets compromised.
Full technical breakdown: https://thecybersecguru.com/news/pingcap-data-breach-tidb-cloud/
Content warning: PingCAP confirmed stolen service account credentials led to a TiDB Cloud breach. See what was taken, what FulcrumSec claims, and which keys to rotate now
The CyberSec GuruPingCAP Data Breach: TiDB Cloud Control Plane Exposed | The CyberSec GuruPingCAP confirmed stolen service account credentials led to a TiDB Cloud breach. See what was taken, what FulcrumSec claims, and which keys to rotate now