PingCAP database and customer data suspected stolen by hackers, involving firms such as Bitget and Pionex

The hacker group FULCRUMSEC has publicly disclosed a cyberattack targeting the TiDB Cloud managed platform operated by distributed database provider PingCAP. Over the past two months, attackers exploited leaked cloud credentials from its codebase to continuously infiltrate systems, cumulatively exfiltrating 10.6 TB of core data and publicly releasing over 200 GB of data packs in the initial phase. Exposed records indicate that affected entities include blockchain-related companies such as Bitget, Pionex, DigiPlus, NFTscan, and Chainbase, as well as prominent multinational corporations including Booking.com, Shopee, and Capcom.