criticallivepartial fix
Zeabur breach exposes 3.2M env-var records; company to shut down
› Zeabur (PaaS)
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Oct 14, 2026
- closed
- ongoing
- CVEs
- none
- sources
- 2
## summary
Zeabur disclosed an October 14–15 2026 security incident in which attackers reused leaked internal credentials to access shared clusters and the platform database, exposing ~3.22 million environment-variable records across 321,810 accounts. Zeabur later announced it would wind down by year end. Users were told to rotate all stored secrets.
severity: Critical platform breach
## affected
- Platform-wide (accounts with stored env vars)
## fixed in
no fixed release yet
## news & write-ups[2]
## notes & caveats
lifecycle live while shutdown/migration continues; rotate secrets regardless.
