Skip to content
PingCAP Breach Exposes Customer Data and Source Code

PingCAP Breach Exposes Customer Data and Source Code

First seen 25 Oct 2026, 09:41 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 25, 2026 at 11:12 UTC
  • •PingCAP was breached by FulcrumSec, exposing sensitive customer data and source code.
  • •The attackers claimed to have stolen 10.6 TB of data, including API keys and customer records.
  • •PingCAP's investigation found no malicious commands executed, but customer credentials may still be at risk.

On October 19, 2026, PingCAP disclosed a breach involving unauthorized access to its internal systems by the cyber extortion group FulcrumSec. The attackers reportedly accessed systems from September 9 to October 7, stealing 10.6 TB of data, including customer records, API keys, and source code. FulcrumSec claims to have obtained sensitive information such as 403,262 unique email addresses and 115,308 plaintext customer API keys, with over 42,612 of these being active at the time of the breach. While PingCAP's investigation found no evidence of malicious commands or persistent access, the potential exposure of customer credentials raises significant security concerns. The company is currently assessing the impact on its customers and has invalidated compromised credentials. The breach highlights vulnerabilities in cloud security practices, particularly regarding customer data management.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-07
PingCAP discovers unauthorized access
PingCAP became aware of the breach and began disabling affected credentials on this date.
Pingcap
2026-10-19
PingCAP publicly discloses breach
PingCAP confirmed the breach and the involvement of FulcrumSec, detailing the data stolen.
Darkreading
2026-10-25
FulcrumSec claims breach details
FulcrumSec published a detailed account of the breach, including the data stolen and its implications.
Infoq

More articles in this cluster (6)

Following this threat?

Track fulcrumsec and Airbnb in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (26)

1 / 4

Common questions

What data was exposed in the breach?
The breach involved customer records, API keys, SQL statements, and source code, totaling 10.6 TB of data.
How long did the attackers have access?
The unauthorized access occurred from September 9 to October 7, 2026.
What actions is PingCAP taking in response?
PingCAP has invalidated compromised credentials and is assessing the impact on affected customers.