PingCap TiDB Leaks

PingCAP's TiDB Cloud, a managed database platform used by banks and e-commerce companies, suffered a massive breach exposing 10.6 TB of data including 180,046 tenant organizations, over 115,000 plaintext API keys, four years of customer connection logs, and complete access to their control plane and billing systems. The attackers maintained undetected access for nearly two months, exfiltrating data every six hours for 88 consecutive times using compromised credentials found in the company's own repositories. The breach demonstrates critical security failures at a cloud provider that claims to safely manage production workloads for major customers.