I find it really baffling how much they are downplaying this incident on their statement.

”An external incident response firm reviewed PingCAP’s production systems and found no evidence that the attacker ran commands or maintained persistent access in the systems reviewed”

That does not appear to be true.

▲

bombcar 3 hours ago | parent | next [-]

Certainly there was no evidence; they likely have no logging anyway!

	▲	zergrush 2 hours ago \| parent [-]
		since they pasted customer creds in jira tickets they most likely are very liable hence the downplaying im not an expert but if I was an investor I'd try to find a buyer for my shares and run

▲

alright2565 an hour ago | parent | prev [-]

> in the systems reviewed

is load bearing I expect.