Zeabur will shut down by 31 December after a second breach. Check your secrets now.
By Lior AharonovFounder, 7IT Solutions ·
Zeabur says an attacker used leaked internal credentials on 14 to 15 October 2026 to enter its shared cluster. BleepingComputer reports over 3.2 million environment-variable records and 321,810 accounts were exposed. Zeabur is winding down: renewals stop and shared-cluster services pause on 1 December, and everything ends by 31 December.
If your app runs on Zeabur, database passwords and API keys stored there may be in someone else's hands, and a migration clock is running. Two breaches in two months, then a closing date.
If you host anything on Zeabur, rotate every credential stored there, revoke active sessions and rebuild any compromised servers. Start the move now: no extra migration time has been confirmed.
The host that stores your secrets is also your single point of failure. Know your exit before you need one.
Lior Aharonov · my takeSources
- Zeabur shutting down after second security breach in two months (BleepingComputer) bleepingcomputer.com
Researched with AI tools; every fact is checked against the linked sources.