TiDB Cloud, the managed database service from PingCAP, runs production workloads for exchanges, games and e-commerce firms. Hacker group FulcrumSec now claims a 10.6TB breach of the platform, saying it spent two months inside using cloud credentials leaked from the company's codebase.

Leak records reportedly name crypto firms Bitget, Pionex, DigiPlus, NFTscan and Chainbase among affected customers, alongside Booking.com, Shopee and Capcom. A first batch of over 200GB has already been released.

The claimed dump covers 180,000 tenant organizations, 115,000 plaintext API keys (42,000 reportedly active), 400,000+ email addresses and 413 private code repositories.

PingCAP has not publicly responded. The data has not been independently verified, and there is no evidence so far that user funds on the named exchanges were affected.