Developer platform Zeabur says attackers broke into its infrastructure, stole data from 321,810 accounts, and accessed about 3.2 million environment-variable records, then the company announced it will shut down by the end of 2026. Zeabur says the October 14-15 intrusion used leaked internal credentials stored in plaintext, including admin credentials and cloud keys, to access shared clusters in nine regions, some dedicated servers, 101 Google Cloud servers, and the production database; attackers also added SSH keys to 50 servers and attached 16 customer disk copies to their own virtual machines.
Why it matters: Zeabur customers may have had secrets, cloud access, and hosted workloads exposed, so this is urgent even if they were not directly notified yet. Affected users should rotate credentials immediately, revoke sessions, and rebuild compromised Google Cloud servers while preparing to migrate off the platform before shutdown dates.
Bill Toulas
2026.10.20
100% relevant
This article establishes a distinct breach-and-shutdown story centered on Zeabur's second major compromise in two months and the company’s decision to wind down operations.
← Back to all stories