TiDB

A security report by Fulcrum Security claims that PingCAP, the company behind the open-source distributed SQL database TiDB, experienced a data leak. The finding is being widely discussed among developers and security professionals, with many debating the implications for companies running TiDB in production and for open-source database security generally.

TiDB, an open-source distributed SQL database company, has suffered a security breach that security commentators say exposes misplaced confidence in cloud security practices. Details of the incident remain limited, but the case is prompting renewed scrutiny of how organizations secure cloud infrastructure and shared responsibility models. Experts are urging companies to re-examine assumptions that cloud providers alone safeguard data.

Security firm FulcrumSec claims it carried out a data collection pipeline every six hours over 22 days following a breach of PingCAP's TiDB Cloud, allegedly taking large amounts of customer data. Confirmed exposure reportedly includes customer metadata, SQL editor history, and billing information. The scale and duration of the alleged access are prompting questions about cloud data protection at PingCAP and how the intrusion went undetected for so long.