FulcrumSec

FulcrumSec is a security-focused site that publishes breach disclosures and data leak releases. This page documents an alleged exfiltration of PingCAP’s TiDB Cloud environment, presenting the incident as a public disclosure with download links and a summary of stolen data.

The disclosure lists extensive technical detail: 10.6 TB of total exfiltration, 4.9 million files, 88 undetected six-hourly exports of the production control plane, roughly 50 GCP storage buckets, a 533.8-million-row BigQuery warehouse, and data on 180,046 tenant organizations. It also cites 403,262 unique emails, 115,308 plaintext customer API keys with 42,612 active, 20.6 million customer SQL statements, and 102 million gateway connections.

The page is intended for security researchers, incident responders, journalists, and affected PingCAP or TiDB Cloud customers who need to assess exposure. It may also interest threat intelligence teams tracking data leak publications and cloud infrastructure security.

Readers should treat the page as a claim by the publisher rather than verified fact, cross-check details with official advisories, and avoid downloading or redistributing leaked data. Organizations named in the disclosure should review credential exposure and rotate keys as a precaution.

In short, FulcrumSec’s PingCAP page is a raw breach disclosure with extensive data points, useful for incident tracking but requiring independent verification.