{"id":35498,"date":"2026-10-20T17:42:04","date_gmt":"2026-10-21T00:42:04","guid":{"rendered":"https:\/\/www.pingcap.com\/?page_id=35498"},"modified":"2026-10-20T21:25:21","modified_gmt":"2026-10-21T04:25:21","slug":"customer-actions-october-2026","status":"publish","type":"page","link":"https:\/\/www.pingcap.com\/ko\/trust-hub\/security\/customer-actions-october-2026\/","title":{"rendered":"Security Update \u2013 Customer Actions October 2026"},"content":{"rendered":"","protected":false},"excerpt":{"rendered":"","protected":false},"author":305,"featured_media":0,"parent":23139,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"class_list":["post-35498","page","type-page","status-publish","hentry"],"acf":[],"featured_image_src":null,"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security Update \u2013 Customer Actions October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud Resources<\/title>\n<meta name=\"description\" content=\"PingCAP powers your digital transformation with a single source of truth at scale. Developed to be an open, unified, distributed SQL database solution. Learn more on Security Update \u2013 Customer Actions October 2026 page.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pingcap.com\/ko\/trust-hub\/security\/customer-actions-october-2026\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Update \u2013 Customer Actions October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud Resources\" \/>\n<meta property=\"og:description\" content=\"PingCAP powers your digital transformation with a single source of truth at scale. Developed to be an open, unified, distributed SQL database solution. Learn more on Security Update \u2013 Customer Actions October 2026 page.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pingcap.com\/ko\/trust-hub\/security\/customer-actions-october-2026\/\" \/>\n<meta property=\"og:site_name\" content=\"TiDB\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/pingcap2015\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-21T04:25:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/static.pingcap.com\/files\/2024\/09\/11005522\/Homepage-Ad.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"714\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@PingCAP\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/security\\\/customer-actions-october-2026\\\/\",\"url\":\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/security\\\/customer-actions-october-2026\\\/\",\"name\":\"Security Update \u2013 Customer Actions October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud Resources\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/#website\"},\"datePublished\":\"2026-10-21T00:42:04+00:00\",\"dateModified\":\"2026-10-21T04:25:21+00:00\",\"description\":\"PingCAP powers your digital transformation with a single source of truth at scale. Developed to be an open, unified, distributed SQL database solution. Learn more on Security Update \u2013 Customer Actions October 2026 page.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/security\\\/customer-actions-october-2026\\\/#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/security\\\/customer-actions-october-2026\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/security\\\/customer-actions-october-2026\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pingcap.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Trust Hub\",\"item\":\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.pingcap.com\\\/trust-hub\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Security Update \u2013 Customer Actions October 2026\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/#website\",\"url\":\"https:\\\/\\\/www.pingcap.com\\\/\",\"name\":\"TiDB\",\"description\":\"TiDB | SQL at Scale\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pingcap.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/#organization\",\"name\":\"PingCAP\",\"url\":\"https:\\\/\\\/www.pingcap.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/static.pingcap.com\\\/files\\\/2021\\\/11\\\/pingcap-logo.png\",\"contentUrl\":\"https:\\\/\\\/static.pingcap.com\\\/files\\\/2021\\\/11\\\/pingcap-logo.png\",\"width\":811,\"height\":232,\"caption\":\"PingCAP\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pingcap.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/facebook.com\\\/pingcap2015\",\"https:\\\/\\\/x.com\\\/PingCAP\",\"https:\\\/\\\/linkedin.com\\\/company\\\/pingcap\",\"https:\\\/\\\/youtube.com\\\/channel\\\/UCuq4puT32DzHKT5rU1IZpIA\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Update \u2013 Customer Actions October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud Resources","description":"PingCAP powers your digital transformation with a single source of truth at scale. Developed to be an open, unified, distributed SQL database solution. Learn more on Security Update \u2013 Customer Actions October 2026 page.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pingcap.com\/ko\/trust-hub\/security\/customer-actions-october-2026\/","og_locale":"ko_KR","og_type":"article","og_title":"Security Update \u2013 Customer Actions October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud Resources","og_description":"PingCAP powers your digital transformation with a single source of truth at scale. Developed to be an open, unified, distributed SQL database solution. Learn more on Security Update \u2013 Customer Actions October 2026 page.","og_url":"https:\/\/www.pingcap.com\/ko\/trust-hub\/security\/customer-actions-october-2026\/","og_site_name":"TiDB","article_publisher":"https:\/\/facebook.com\/pingcap2015","article_modified_time":"2026-10-21T04:25:21+00:00","og_image":[{"width":1440,"height":714,"url":"https:\/\/static.pingcap.com\/files\/2024\/09\/11005522\/Homepage-Ad.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@PingCAP","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pingcap.com\/trust-hub\/security\/customer-actions-october-2026\/","url":"https:\/\/www.pingcap.com\/trust-hub\/security\/customer-actions-october-2026\/","name":"Security Update \u2013 Customer Actions October 2026 Security Incident Report: Unauthorized Access to PingCAP Cloud Resources","isPartOf":{"@id":"https:\/\/www.pingcap.com\/#website"},"datePublished":"2026-10-21T00:42:04+00:00","dateModified":"2026-10-21T04:25:21+00:00","description":"PingCAP powers your digital transformation with a single source of truth at scale. Developed to be an open, unified, distributed SQL database solution. Learn more on Security Update \u2013 Customer Actions October 2026 page.","breadcrumb":{"@id":"https:\/\/www.pingcap.com\/trust-hub\/security\/customer-actions-october-2026\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pingcap.com\/trust-hub\/security\/customer-actions-october-2026\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.pingcap.com\/trust-hub\/security\/customer-actions-october-2026\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pingcap.com\/"},{"@type":"ListItem","position":2,"name":"Trust Hub","item":"https:\/\/www.pingcap.com\/trust-hub\/"},{"@type":"ListItem","position":3,"name":"Security","item":"https:\/\/www.pingcap.com\/trust-hub\/security\/"},{"@type":"ListItem","position":4,"name":"Security Update \u2013 Customer Actions October 2026"}]},{"@type":"WebSite","@id":"https:\/\/www.pingcap.com\/#website","url":"https:\/\/www.pingcap.com\/","name":"\ud2f0DB","description":"TiDB | SQL at Scale","publisher":{"@id":"https:\/\/www.pingcap.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pingcap.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/www.pingcap.com\/#organization","name":"PingCAP","url":"https:\/\/www.pingcap.com\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/","url":"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png","contentUrl":"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png","width":811,"height":232,"caption":"PingCAP"},"image":{"@id":"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/pingcap2015","https:\/\/x.com\/PingCAP","https:\/\/linkedin.com\/company\/pingcap","https:\/\/youtube.com\/channel\/UCuq4puT32DzHKT5rU1IZpIA"]}]}},"grav_blocks":[{"acf_fc_layout":"columns","format":"","enable_box_container":false,"column_num":"10","columns":[{"type":"wysiwyg","wysiwyg":"<p style=\"margin:0 0 24px 0;font-size:14px;font-weight:700;opacity:0.75;\">Published: October 20, 2026<\/p>\n<p>On October 19, we published a <a href=\"https:\/\/www.pingcap.com\/trust-hub\/security\/security-update-october-2026\">security incident report<\/a> regarding unauthorized access to our cloud resources. While investigation into affected accounts continues, all customers are advised to take immediate preventive measures without waiting for direct notification.<\/p>\n<p>The API-key values in the breached data were encrypted, and so far we have not found evidence that any were decrypted or used. Even so, there are two precautions worth taking now: replace your active TiDB Cloud management API keys, and be alert to targeted phishing. The key rotation steps below come from our engineering team.<\/p>\n<h2 style=\"margin:40px 0 0 0;padding-bottom:16px;\">At a Glance<\/h2>\n<p style=\"margin:0 0 24px 0;\">We recommend two actions: replace your active management API keys, and treat unexpected requests with caution.<\/p>\n<figure class=\"wp-block-table\" style=\"margin:0 0 24px 0;\">\n<table>\n<thead>\n<tr>\n<th>Action<\/th>\n<th>Who<\/th>\n<th>What to Do<\/th>\n<th>When<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Replace active TiDB Cloud management API keys<\/td>\n<td>Organization owners<\/td>\n<td>Create replacement keys, update and verify dependent applications, then revoke the old keys<\/td>\n<td>Now, as a precaution<\/td>\n<\/tr>\n<tr>\n<td>Revoke a key you suspect is misused<\/td>\n<td>Organization owners<\/td>\n<td>Revoke it immediately and contact <a href=\"mailto:security@pingcap.com\">security@pingcap.com<\/a><\/td>\n<td>Immediately<\/td>\n<\/tr>\n<tr>\n<td>Be alert to targeted phishing<\/td>\n<td>Everyone on your team<\/td>\n<td>Verify unexpected requests through a trusted, previously established channel<\/td>\n<td>Ongoing<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n<h2 style=\"margin:40px 0 0 0;padding-bottom:16px;\">Replace Your Active TiDB Cloud Management API Keys<\/h2>\n<p>As a precaution, we recommend replacing active management API keys and revoking keys that are no longer needed.<\/p>\n<p style=\"margin:0 0 16px 0;\">Which path you take depends on whether you have seen signs of misuse:<\/p>\n<ul style=\"margin:0 0 24px 0;\">\n<li><strong>No suspected misuse:<\/strong> create replacement keys, update and verify your dependent applications and automation, then promptly revoke the old keys.<\/li>\n<li><strong>Suspected misuse:<\/strong> revoke the key immediately and contact us, even if doing so temporarily interrupts an integration.<\/li>\n<\/ul>\n<h2 style=\"margin:40px 0 0 0;padding-bottom:16px;\">How to Rotate an API Key<\/h2>\n<p>Rotation takes three steps: create the new key, move your applications to it, then delete the old key. Only the owner of an organization can create or delete API keys. You can also follow the <a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/api\/v1beta\/#section\/Authentication\/API-key-management\">official API key documentation<\/a>.<\/p>\n<h3 style=\"margin:32px 0 0 0;padding-bottom:16px;\">Step 1: Create a New API Key<\/h3>\n<ol style=\"margin:0 0 24px 0;\">\n<li>In the <a href=\"https:\/\/tidbcloud.com\">TiDB Cloud console<\/a>, switch to your target organization using the combo box in the upper-left corner.<\/li>\n<li>In the left navigation pane, click <strong>Organization Settings<\/strong> &gt; <strong>API Keys<\/strong>.<\/li>\n<li>On the API Keys page, click <strong>Create API Key<\/strong>.<\/li>\n<li>Enter a description for your API key.<\/li>\n<li>Configure the role and scope for the API key. For more information about the permissions of a role, see <a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/manage-user-access\/#user-roles\">User roles<\/a>.<\/li>\n<li>Click <strong>Generate API Key<\/strong>. Copy and save the public key and the private key.<\/li>\n<li>Make sure you have saved the private key in a secure location. The private key only displays when you create it. After you leave the page, you cannot get the full private key again.<\/li>\n<li>Click <strong>Done<\/strong>.<\/li>\n<\/ol>\n<h3 style=\"margin:32px 0 0 0;padding-bottom:16px;\">Step 2: Update and Verify Your Applications<\/h3>\n<p>Replace the old key with the new one in every application, script, and automation that uses it. Confirm that each one works with the new key before you move on.<\/p>\n<h3 style=\"margin:32px 0 0 0;padding-bottom:16px;\">Step 3: Delete the Old API Key<\/h3>\n<ol style=\"margin:0 0 24px 0;\">\n<li>In the <a href=\"https:\/\/tidbcloud.com\">TiDB Cloud console<\/a>, switch to your target organization using the combo box in the upper-left corner.<\/li>\n<li>In the left navigation pane, click <strong>Organization Settings<\/strong> &gt; <strong>API Keys<\/strong>.<\/li>\n<li>On the API Keys page, click <strong>&#8230;<\/strong> in the row of the API key you want to delete, and then click <strong>Delete<\/strong>.<\/li>\n<li>Click <strong>I understand, delete it<\/strong>.<\/li>\n<\/ol>\n<p>Repeat these steps for each organization you own.<\/p>\n<h2 style=\"margin:40px 0 0 0;padding-bottom:16px;\">If You Suspect an API Key Is Being Misused<\/h2>\n<p>Revoke the API key right away using Step 3 above, then contact <a href=\"mailto:security@pingcap.com\">security@pingcap.com<\/a>. Do not wait to create a replacement first. Please do not include passwords, tokens, private keys, or other secrets in your message.<\/p>\n<p>You can also start reviewing now, without waiting for an individual impact notification. List every API key in each of your organizations under <strong>Organization Settings<\/strong> &gt; <strong>API Keys<\/strong>, revoke any you no longer need, and review the logs available to you for activity you do not recognize.<\/p>\n<h2 style=\"margin:40px 0 0 0;padding-bottom:16px;\">Be Alert to Targeted Phishing<\/h2>\n<p>Treat unexpected requests involving passwords, verification codes, payment changes, or urgent account actions with caution, even if they include accurate information about your organization. Verify requests through a trusted, previously established channel.<\/p>\n<p style=\"margin:0 0 16px 0;\">We mention this because exported records included customer contacts and business and billing details, so a message can look credible. Three things are worth a pause:<\/p>\n<ul style=\"margin:0 0 24px 0;\">\n<li>A request to share a password or verification code<\/li>\n<li>A request to change payment or billing details<\/li>\n<li>A message that pushes you to take urgent action on your account<\/li>\n<\/ul>\n<p>If you are unsure, do not reply to the message or use contact details inside it. Reach out through a channel you already trust.<\/p>\n<h2 style=\"margin:40px 0 0 0;padding-bottom:16px;\">What Happens Next<\/h2>\n<p>I know these steps take time and may affect your workflows. If you need help, contact <a href=\"mailto:security@pingcap.com\">security@pingcap.com<\/a>. Please do not include passwords, tokens, private keys, or other secrets in your message.<\/p>\n","accordion_column_title":"","accordion_sections":false,"accordion_enable_faq_schema":false,"video_image":false,"video_url":"","video_content":""}],"block_background":"block-bg-none","block_background_video_type":"url","block_background_video_url":"","block_background_video_file":false,"block_background_image":false,"block_background_overlay":false,"unique_id":"","block_option_custom_class":"","block_option_padding":[],"block_option_hide":[],"block_add_top_arc":false,"block_increase_bottom_padding":false}],"_links":{"self":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/pages\/35498","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/users\/305"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/comments?post=35498"}],"version-history":[{"count":9,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/pages\/35498\/revisions"}],"predecessor-version":[{"id":35513,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/pages\/35498\/revisions\/35513"}],"up":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/pages\/23139"}],"wp:attachment":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/media?parent=35498"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}