The company says attackers entered internal systems with stolen service-account credentials and copied data ranging from database-editor text to contract and billing records.
PingCAP says attackers used stolen service-account credentials to access internal systems and copy source code and customer-related records. The theft reached beyond contact details to include database-editor text, encrypted API-key values and commercial records.
The intrusion took place between September 9 and October 7, 2026, according to The Hacker News, which reported the disclosure on October 22. Service accounts let software access systems or perform tasks; the stolen credentials gave the attackers access to certain PingCAP internal systems.
The reported copied records covered four areas:
The number of affected customers and whether anyone decrypted the API-key values remain unclear.
PingCAP says it became aware of the incident on October 7 and began disabling the affected credentials that same day.
The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min
The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min
