Science & Tech · Cybersecurity · 5 hrs ago
PingCAP Breach Exposed Customer Business Data, Company Says
Database maker PingCAP disclosed a breach on Oct.
19, involving its TiDB cloud service.
The company said attackers used stolen service account credentials to access its internal systems from Sept.
9 to Oct.
7 and copy data and source code.
PingCAP said customer databases were not accessed, but information about customers, including billing details, contract terms, cloud account data and product usage, was exposed.
The company also said attackers exported a table of encrypted API keys, which investigators said could not be used maliciously.
The attackers claim their access was broader and lasted nearly two months, including access to records and files that PingCAP did not confirm were taken.
The breach could put customers at risk because exposed business information may be sensitive, even without direct access to their databases.
Investigators are still working out what was accessed and what risks customers may face.
PingCAP said hackers accessed its systems and copied data and source code, including customer business information.
The company said attackers did not access customers’ databases, while the extortion group FulcrumSec claimed a broader theft.
PingCAP said the unauthorized access lasted from Sept. 9 to Oct. 7 and involved stolen service account credentials.
The exposed information included billing data, contract terms, pricing, cloud account details and product usage information.
Investigators said encrypted API keys were exported, but the encryption prevented them from being used maliciously.
- Who
- PingCAP, a software maker that sells the TiDB SQL database program, was breached by the extortion group FulcrumSec.
- What
- Hackers accessed PingCAP systems and copied data and source code. The company said customer business data was exposed but customers’ databases were not accessed.
- When
- PingCAP said the access lasted from Sept. 9 to Oct. 7. It disclosed the breach on Oct. 19.
- Where
- PingCAP’s internal company systems and cloud-related systems. The article does not state a specific physical location.
- Why
- The article does not state the attackers’ motive beyond describing FulcrumSec as an extortionist group.
PingCAP
FulcrumSec
Scope of access
PingCAP
PingCAP said attackers accessed internal systems and customer business data but did not access customers’ databases.
FulcrumSec
FulcrumSec claimed it obtained a broad range of company records, files, support tickets, analytics data and customer connection logs.
Duration
PingCAP
PingCAP said unauthorized access lasted from Sept. 9 to Oct. 7.
FulcrumSec
FulcrumSec said its access lasted nearly two months.
PingCAP said unauthorized access to its systems began.
PingCAP said unauthorized access ended.
PingCAP disclosed that it had been breached.
- Company
- PingCAP
- Product
- TiDB, an SQL database program
- Access period
- Sept. 9 to Oct. 7, according to PingCAP
- Stolen information
- Customer billing and business data, source code and internal company data
- Affected organizations
- Nearly 2,000 in Japan, China and Hong Kong, and another 500 in India, according to FulcrumSec