PingCAP2026-10-21 00:43:51FulcrumSec claims 10.6 TB data theft from TiDB Cloud; PingCAP says customer data is unaffectedChainCatcher, citing market information, reported that the ransomware and disclosure group FulcrumSec has publicly claimed it continuously exfiltrated about 10.6 TB of data from TiDB Cloud, the managed database service under PingCAP, and released roughly 200 GB as a first-stage sample. PingCAP later issued a statement acknowledging that some internal operational data had been accessed without authorization. The company said the incident did not involve a product vulnerability and would not affect the security of customer databases or business data. The report also noted that companies including Bitget and Baidu have previously worked with PingCAP. No further technical details were disclosed in the brief.30
Bitget2026-10-20 12:13:06Bitget says no user or sensitive data exposed after TiDB Cloud intrusion, Xie Jiayin saysBitget Greater China head Xie Jiayin said on Oct. 20 that hackers breached TiDB Cloud, a cloud database product operated by PingCAP, and obtained data stored on the platform. He said Bitget and Baidu had previously worked with the service provider, but Bitget had only stored part of its public trade log data on TiDB Cloud and had stopped using the service more than two months ago. According to Xie, the incident did not involve user data and did not expose passwords or other sensitive information. He added that users do not need to worry. Xie also clarified what he described as public trading data, saying it refers to information that all users can view in the trade feed channel. The statement addresses concerns around the scope of the breach and Bitget’s historical use of the affected database service.30
Bitget2026-10-20 12:16:24Bitget executive says former cloud database partner was hacked, no user data exposedBitget Greater China head Xie Jiayin said a hacker breached data stored in TiDB Cloud, a cloud database product from PingCap, and obtained information from the system. He said Bitget, along with companies including Baidu, had previously worked with the database provider. According to Xie, Bitget had only stored part of its public trade log data in TiDB and stopped using the service more than two months ago. He added that no user data was involved and that no sensitive information, including passwords, was leaked. The statement was posted on X and addressed concerns over whether the incident affected Bitget users.20