Zeabur Platform Shutting Down Following Second Security Breach in Two Months
Attacker exploited leaked internal credentials to steal environment variable records and account data
Key Takeaways
- Zeabur experienced a second security breach in two months, resulting in the exfiltration of over 3.2 million environment variable records and data for 321,810 accounts.
- The attacker exploited leaked internal credentials stored in plaintext to gain unauthorized access to the platform's infrastructure.
- The platform has announced it is shutting down following the incident.
- Users are advised to rotate any exposed credentials, secrets, or environment variables and audit downstream services for potential compromise.
Quick answers
- What happened?
- Zeabur, a development platform, has confirmed a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise infrastructure. Over 3.2 million environment variable records and data for 321,810 accounts were stolen. The company has announced it is shutting down following the breach.
- Which products are affected?
- Zeabur platform
- What should defenders do?
- Users should rotate any credentials, secrets, or environment variables that may have been exposed. Downstream services and deployments relying on potentially compromised configuration data should be audited and secured. No patch is available as the platform is shutting down.
Zeabur, a development platform, has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. The incident marks the second security breach for the platform within a two-month period. Following the disclosure, Zeabur announced it is shutting down operations. The attacker gained unauthorized access by leveraging leaked internal credentials that were stored in plaintext, compromising the platform's infrastructure and exfiltrating sensitive environment variable data and account information. The platform's shutdown is being framed as a response to the breach, with users advised to rotate any exposed credentials, secrets, or environment variables and audit downstream services that may have been affected by the exposed configuration data.
Security Details
Attacker used leaked internal credentials stored in plaintext to compromise Zeabur's infrastructure and exfiltrate environment variable records and account data. The incident is the second breach for the platform within a two-month timeframe.
Affected products
Zeabur platform
Mitigation
Users should rotate any credentials, secrets, or environment variables that may have been exposed. Downstream services and deployments relying on potentially compromised configuration data should be audited and secured. No patch is available as the platform is shutting down.
Sources
BleepingComputer
Zeabur shutting down after second security breach in two months
Oct 20, 2026 · 19:33
Original link
Related Security News
Nikkei Discloses Third Data Breach in a Month, 1.83 Million Records Exposed
Nikkei Inc. has disclosed a third data breach within approximately one month, exposing 1.83 million personal information records. The incident follows two prior breaches disclosed in the same period, suggesting a pattern of recurring security failures at the Japanese media conglomerate.
