TiDB Breach Exposes Flawed Cloud Security Assumptions

PingCAP, the company behind the TiDB database, disclosed on October 19 that attackers using stolen service account credentials accessed its internal systems from September 9 to October 7 and copied data and source code, Dark Reading reports. PingCAP said the attackers did not access customers' databases, but did access customer billing and business data, cloud account information and product usage data; the extortion group FulcrumSec claims a broader theft.