PingCAP TiDB Cloud breached; hackers exfiltrate 10.6 TB over two months undetected—exposing 180,046 customers, 115,308 API keys, SQL statements, and four years of connection logs via compromised GCP credentials.

The PingCAP TiDB Cloud Leaks

← FULCRUMSEC PingCAP Inc. / TiDB Cloud • Distributed databases • 10.6 TB total exfiltration • 200 GB stage one release 10.6 TB total exfil • 4,901,203 files • 88 consecutive six-hourly exports of the production control plane, undetected • ~50 GCP storage buckets • a 533.8-million-row BigQuery warehouse • 180,046 tenant organisations • 403,262 unique emails • 115,308 plaintext customer API keys, 42,612 active • 20,645,574 customer SQL statements • 102,003,766 gateway connections • 5,036,738 custo...