← Wednesday, October 21, 2026SecurityNews

Report alleges TiDB Cloud breach exposed customer keys, queries and control-plane data

fulcrumsec.vg 9 min read Editor score 7/10

The report claims 10.6 TB was exfiltrated, including 115,308 plaintext customer API keys and 20.6 million SQL statements, across TiDB Cloud and related systems. If substantiated, the scope makes this a significant cloud-platform security incident.

What

FulcrumSec alleges attackers exfiltrated TiDB Cloud control-plane, billing, analytics, source-code, and other data.

How

The report claims 88 six-hourly control-plane exports went undetected and plaintext API keys, SQL statements, and connection logs were exposed.

Why it matters

The alleged compromise underscores how stolen cloud credentials and weak detection can expose control planes and customer data across a multi-tenant service.

Read on fulcrumsec.vg → Hacker News · 13 comments

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.