PingCAP is facing backlash for downplaying a security incident in which customer production credentials and vulnerability details were allegedly exposed through Jira tickets. This severe operational security failure undermines the company's recent claims of passing a rigorous source-code security assessment by NCC Group.