Zeabur shuts down after second security breach in two months

Developer platform Zeabur disclosed a second breach in two months, in which an attacker used plaintext internal credentials to steal over 3.2 million environment variable records and data on 321,810 accounts. The company will wind down services starting December 1, 2026, and finish by December 31.

• 3.2 million environment variable records and 321,810 accounts exposed
• Shared clusters in nine regions and 101 GCP servers affected
• Admin tokens unchanged since January 2024 and had no expiry
• Services wind down from December 1, fully off by December 31, 2026