Comment by llama052
5 hours ago
https://www.pingcap.com/trust-hub/security/security-update-o...
I find it really baffling how much they are downplaying this incident on their statement.
”An external incident response firm reviewed PingCAP’s production systems and found no evidence that the attacker ran commands or maintained persistent access in the systems reviewed”
That does not appear to be true.
Certainly there was no evidence; they likely have no logging anyway!
since they pasted customer creds in jira tickets they most likely are very liable hence the downplaying
im not an expert but if I was an investor I'd try to find a buyer for my shares and run
> in the systems reviewed
is load bearing I expect.