Bitget Says TiDB Cloud Intrusion Exposed Only Public Trade Logs

Bitget said Tuesday that an intrusion at a cloud database it formerly used exposed only public trade logs, with no user data or passwords affected, after an internal review.

Bitget Greater China head 谢家印 said attackers obtained data from TiDB Cloud, a database product operated by PingCAP. Bitget had kept some trade execution logs on the platform. Those records were already visible to all users through the exchange’s public trade feed.

Bitget stopped using the service more than two months ago, 谢家印 said. The exchange said the incident involved none of its user data and exposed no passwords or other sensitive information. Its assessment concerns the records Bitget had placed in TiDB Cloud.

The records Bitget identified were logs of completed trades, rather than private account information. Their contents were available in the public trade feed before the intrusion. Bitget’s response establishes what it had stored with the outside database provider and what its review found among the affected records.