Executive Summary
Cloud deployment platform Zeabur has announced a permanent shutdown effective December 31, 2026, following a critical security breach between October 14–15, 2026. This incident, the second major breach in two months, resulted in the exposure of over 3.2 million environment variable records, including API keys and database passwords, and compromised root access to 101 Google Cloud Platform (GCP) dedicated servers.
Technical analysis indicates the attackers exploited long-lived administrative tokens and AWS/GCP keys stored in plaintext within a private configuration repository. The attackers successfully pivoted from shared cluster environments into Zeabur's internal network (Tailscale), ultimately accessing the production database. Despite remediation efforts after an August 2026 breach, the company admitted that credential rotation was incomplete, leaving critical infrastructure vulnerable.
The impact is severe, affecting 321,810 accounts and hundreds of customer database services, including n8n automation environments. The shutdown poses an immediate business continuity risk to all Zeabur users, who must migrate infrastructure and rotate all secrets previously stored on the platform to prevent downstream exploitation of AI services and third-party cloud accounts.