Bitget says no user data exposed in alleged TiDB Cloud breach

An extortion group says it walked off with a mountain of data from TiDB Cloud, a managed database service used by companies around the world. Bitget, one of the firms named on the group’s list of affected clients, says its users have nothing to worry about. On October 20, 2026, Xie Jiayin, Bitget’s head of Greater China operations, confirmed that the exchange had used TiDB Cloud. According to Xie, it held only non-sensitive public trade logs, and Bitget had already stopped using the service more than two months earlier. What FulcrumSec is claiming The allegations come from FulcrumSec, a group that operates on the extortion model. The pitch to victims is simple: pay up, or watch your data get published. FulcrumSec claims it stole approximately 10.6 TB of data from TiDB Cloud, spread across 4.9 million files. The group says the haul includes customer records and API keys. The group also claims the breach could affect more than 180,000 organizations. That would make it a sprawling incident, if the numbers hold up. As of October 20, the claims had not been independently verified. FulcrumSec published a data sample of roughly 200 GB shortly after announcing the breach, but outside confi...