PingCAP's breach reached customer secrets through support tickets Investigators trace stolen repository and support credentials into cloud storage. Customers should rotate support-shared secrets even though production TiDB access was not found.