Zeabur, a developer hosting platform, disclosed a major security breach occurring on October 14-15, 2026, in which attackers used leaked internal credentials stored in plaintext to access its infrastructure. The attackers compromised shared clusters and dedicated servers, eventually accessing the production database and stealing over 3.2 million environment variable records and information for 321,810 accounts. This represents the second significant security incident in two months, following an August 2026 breach. Security failures included storing credentials unencrypted, failing to rotate administrator credentials since January 2024, and leaving administrator portals publicly accessible on the internet.
In response to the ongoing security challenges, Zeabur announced it will shut down its services effective December 1, 2026, with complete closure by December 31, 2026. The company stated that scaling operations to meet market demand has become increasingly complex and difficult to maintain securely. Starting December 1, service renewals will be disabled and shared cluster services paused. By year-end, all dedicated servers will expire and shared clusters will cease operations. The company indicated users may receive additional time for data migration, though specific timelines have not been provided.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
