Zeabur shuts down after a second breach exposed customer data and server access
The hosting service will close after attackers reached its systems with leaked credentials and exposed data tied to 321,810 accounts.
Zeabur says a second breach in two months led it to shut down its hosting and deployment service, after attackers used leaked internal credentials to reach shared clusters, dedicated servers, and its production database. The company says the latest incident exposed about 3.2 million environment-variable records and data for 321,810 accounts, and it also found root sign-ins on 101 GCP servers, SSH keys added to 50 servers, and 16 customer disk copies attached to attacker VMs. Zeabur linked the attack to credentials that may have been taken during its August breach, and admitted that some administrator secrets were never encrypted or rotated after that earlier incident. It will disable renewals on December 1, 2026, pause shared-cluster services that day, and complete shutdown by December 31, 2026.
Why it matters
For customers, this turns a security incident into a service exit. Zeabur says the attackers got into shared clusters, dedicated servers and its production database, then reached root access on servers and attached customer disk copies to attacker machines. That means the breach affected both account data and infrastructure trust, and the shutdown signals those risks will not be contained inside the platform anymore.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.
Sources
- BleepingComputer