Zeabur data breach
Was I affected?
Zeabur confirmed a breach affecting about 321,810 people, exposing email addresses and phone numbers. You may be affected if you had a Zeabur account, especially if you stored environment variables, API keys or database passwords on Zeabur.
| Announced | Oct 19, 2026 |
|---|---|
| When it happened | October 14–15, 2026 |
| Country | Several countries |
| People affected | 321,810 |
| Data exposed | Email addresses, Phone numbers and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Developer hosting platform Zeabur said an attacker used leaked internal credentials on October 14–15, 2026 to break into its shared cluster, some dedicated servers and internal systems, and then read its platform database. Data for 321,810 accounts was affected, including profile details such as email address, username and phone number, along with about 3.2 million environment-variable records that can hold customers' API keys and other secrets. Zeabur says two-factor and passkey data was not read, and it has revoked all platform access tokens. It was the company's second breach in two months, and Zeabur says it will shut down its service between December 1 and December 31, 2026.
What should I do?
- Rotate every API key, database password and other secret you stored as an environment variable on Zeabur, starting with AI service and cloud keys, and check their usage logs for unexpected activity.
- If you used a Zeabur dedicated server, follow Zeabur's guidance to rebuild it rather than keep using it.
- Expect phishing aimed at the email address on your Zeabur account, and move your projects off Zeabur before the December 2026 shutdown.
Check the other services you use →
Sources
- October 2026 Security Incident · Zeabur · official
- Zeabur shutting down after second security breach in two months · BleepingComputer · news