tl;dr: Attackers claim to have exfiltrated 10.6 TB from PingCAP/TiDB Cloud over nearly two months undetected, including the full control plane, 115,308 plaintext customer API keys, 20.6M customer SQL statements, 413 private source repos, four years of gateway logs, and finance/CRM data covering named customers like Booking.com, Shopee, CAPCOM, and Mercari. They allege PingCAP's own 2022 Jira ticket (SECURITY-22) documented a critical multi-tenant isolation flaw that was never fixed, and that support engineers routinely pasted customer production credentials—including AWS root keys and GitHub admin tokens—into Jira tickets. A 200 GB stage-one dump has been released via torrent.