> JapanHacked_
[Investigating][Severity: Major][Credential abuse]

PingCAP: unauthorized access to internal systems

PingCAP, which makes the TiDB distributed database, said a third party used stolen account credentials to access its internal systems and copy data between 9 September and 7 October (US time). Up to about 50,000 personal records in Japan leaked, including TiDB Cloud user names and emails, SQL editor history, customer names, company names and phone numbers, contract terms and support tickets. No unauthorized access to TiDB Cloud itself or card data leak was found.

Disclosed

2026-10-21

Organizations involved

1

Leaked or at risk

50K

50,000

Downtime

Unknown

Timeline

  1. Started 2026-09-09
  2. Detected 2026-10-07
  3. Disclosed 2026-10-21
  4. 42 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][E-mail address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる情報漏洩に関するお詫びとご報告PingCAP · 2026-10-21
  2. [2][Official]Security Update – October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud ResourcesPingCAP · 2026-10-19