Zeabur To Shut Down Following Security Breaches
The hosting provider will cease all operations by December 31, 2026, after a data breach impacted over 320,000 user accounts.
Updated on Oct. 20, 2026 in Cybersecurity
Live Poll
Should companies be forced to shut down after repeated, significant cybersecurity breaches?
Cloud hosting platform Zeabur is shutting down all services by December 31, 2026, following a series of security breaches. The platform suffered two major incidents in 2026, including an October breach that exposed over 3.2 million environment variable records.
Why it matters
The shutdown follows the revelation of critical security failures that compromised hundreds of thousands of user accounts. The platform cited the growing difficulty of maintaining service integrity alongside these persistent security incidents as the primary reason for closure.
The October security breach exposed over 3.2 million environment variable records and affected 321,810 accounts, with attackers adding unauthorized SSH keys to 50 GCP servers.
The players
Zeabur
A cloud hosting and deployment platform that provided automated infrastructure management for developers.
The details
Attackers bypassed security by utilizing plaintext internal credentials and cloud access keys that had not been updated since January 2024. These credentials granted them access to production databases and shared clusters. The breach was exacerbated by the fact that administrative portals were exposed directly to the public internet, allowing the attackers to modify server configurations and attach customer disk copies to virtual machines.
Timeline
January 2024: Administrator credentials were created.
August 2026: The initial security breach occurred.
October 14-15, 2026: A second, more severe security breach took place.
December 1, 2026: Service renewals will be disabled and shared clusters paused.
December 31, 2026: The platform shutdown concludes.
The Tech Race
This shutdown marks a departure from the competitive landscape of automated deployment platforms, which increasingly rely on robust secrets management. The failure highlights the risks inherent in the Google Cloud Platform (GCP) shared responsibility model when administrative access is left unmanaged.
Users must export their environment variables and migrate their deployments to new hosting providers before the December 31, 2026, shutdown date. All active services will be disabled on the platform starting December 1, 2026.
The takeaway
The closure serves as a warning on the necessity of regular credential rotation and restricted access to administrative interfaces. Users should monitor their account status and verify that any data previously hosted on the platform has been successfully migrated to secure alternatives.
Further reading
For broader trends in platform security, visit Cybersecurity.
Live Poll
Should companies be forced to shut down after repeated, significant cybersecurity breaches?
