GoKawiilPingCAP discloses month-long breach of TiDB database company's internal systems
PingCAP, maker of the TiDB database used by companies including Atlassian, Square and Pinterest, disclosed on Oct. 19 that attackers had accessed its internal systems from Sept. 9 to Oct. 7 using stolen service account credentials. A group calling itself FulcrumSec, which has previously listed targets such as LexisNexis, Novo Nordisk and Manchester Airports Group on its leak site, is said to have copied internal data and source code during that period. PingCAP's third-party investigation found no evidence attackers ran malicious commands or kept persistent access, and the company did not respond to a request for comment.