Unauthorized Access to PingCAP Cloud Resources

A closer look at Unauthorized Access to PingCAP Cloud Resources

What this page is about

This is a security incident report titled "Unauthorized Access to PingCAP" published October 19, 2026. It summarizes an incident where an unauthorized party used stolen service account credentials to access certain PingCAP internal systems, copy data, and obtain source code.

What actually happened and what they found

The unauthorized access occurred between September 9 and October 7, 2026; PingCAP became aware on October 7 and disabled the affected credentials that day. An external incident response firm reviewed production systems and found no evidence the attacker ran commands or maintained persistent access in the systems reviewed, though that finding does not change the data exposure described.

With outside counsel and third-party forensic specialists, PingCAP reports no evidence that data stored in TiDB was impacted. As of October 14, identified compromised credentials were invalidated and the identified unauthorized access paths were blocked. The investigation continues focusing on customer-specific impact and possible exploitation before remediation.

What it means for customers and next steps

The page lists categories of customer data identified as affected to date and notes this does not mean every customer had every category exposed; PingCAP is determining scope for each customer.

PingCAP says it will notify affected customers directly once customer-specific impact is established and provides an email for questions: security@pingcap.com.

Questions people ask about Unauthorized Access to PingCAP Cloud Resources

Was my data stored in TiDB impacted?

According to the report, there is no evidence that data stored in TiDB was impacted.

What did PingCAP do right away?

PingCAP disabled the affected credentials on October 7, invalidated identified compromised credentials by October 14, and blocked identified unauthorized access paths.

How can I get more information about whether I was affected?

PingCAP will notify affected customers directly and you can contact security@pingcap.com with questions.

Unauthorized Access to PingCAP Cloud Resources was shared on NexURLs by Nexis on November 3, 2026, in Tech & AI.