Zeabur shuts down following massive breach of user data and credentials
Development platform Zeabur is closing operations after an attacker used leaked internal credentials to compromise its infrastructure and access millions of records.
FTMQ Security, written by our newsroom0 views

Development platform Zeabur has disclosed a major cybersecurity incident that led to the theft of internal credentials and user data, BleepingComputer reported. An attacker accessed internal credentials stored in plaintext to breach the company infrastructure. The incident resulted in the theft of more than 3.2 million environment variable records. [1]
The breach also exposed information belonging to 321,810 user accounts, according to BleepingComputer. The attacker executed the intrusion by using stolen administrator credentials to compromise the platform. [1]
Zeabur operates as an artificial intelligence DevOps engineering service that automates deployment, scaling, and infrastructure management. It offers deployment options on shared clusters, managed virtual private servers, or customer infrastructure, alongside a template marketplace for hosting tools such as WordPress and Supabase. [2]
The security incident marks the second breach at the company in two months. Following the compromise of its systems and credentials, Zeabur is shutting down its operations, BleepingComputer reported. [1]
In short
- An attacker used plaintext internal credentials to compromise Zeabur infrastructure.
- Over 3.2 million environment variable records were stolen in the incident.
- Account information for 321,810 users was exposed during the breach.
- Zeabur is shutting down following its second security incident in two months.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Zeabur shutting down after second security breach in two monthsBleepingComputer, 6h ago (the report this story comes from)
Background
- [2]Zeabur on Grokipedia
Our newsroom writes these reports with the help of software, from the 2 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- ConnectWise shuts cloud backup after hackers breach Microsoft 365 tenantsTop Stories, 3d ago
- ASOS confirms data breach following social engineering attack on employee credentialsData Breaches, 12d ago
- EY Data Breach Exposes Information of Goldman Sachs and Man Group ClientsTop Stories, 12d ago
- Conduent agrees to pay 80 million dollars over 2024 healthcare breachData Breaches, 1d ago
- Discord security bot Double Counter breached exposing user email addressesTop Stories, 13d ago
More in Top Stories
- Linux kernel flaw allows KVM virtual machine guest host escape2h ago
- Siemens Software Center Vulnerability Exploited in ClickFix Malware Campaign1d ago
- Hackers claim theft of data from State Bank of India customers1d ago
- iRhythm Technologies confirms June data breach impacted 8 point 2 million individuals1d ago
- Rank Math PRO WordPress plugin compromised in supply chain attack1d ago
- MITRE Releases ATT&CK Version 20 Addressing AI Abuse and Infrastructure Attacks1d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.

Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.