PingCAP: replace management API keys as a precaution
PingCAP confirms an internal systems incident and exported customer records. Its customer guidance calls for replacing active TiDB Cloud management keys.
- Platform
- PingCAP
- Exposure
- Provider held credentials
- Response
- Further action needed
What happened
PingCAP reports unauthorized access between September 9 and October 7. It found no evidence that data stored in TiDB was impacted. Exported records included account and business information; the API key values were encrypted.
The October 20 guidance says there is no evidence of key decryption or use, but asks customers to rotate active management keys without waiting for individual notification. Radar’s Act now priority reflects that precaution, not a claim that plaintext keys were stolen.
Response checklist
Sources
Technical facts come from these sources. Priorities and suggested reviews are Oktsec’s analysis.
- October incident reportPingCAP · vendor · Checked Oct 23, 2026 UTC
- Customer actions and API key replacementPingCAP · vendor · Checked Oct 23, 2026 UTC
Editorial record1 entry
Added to the local collection after reviewing original sources. Disclosure date is shown separately from Radar coverage.
Choose what to review
Get incident alerts and briefings
Act now incidents and team briefings, with sources and recommended actions.
Checking availability…