Zeabur Cloud Platform Data Breach
Between October 14 and October 15, 2026, cloud PaaS provider Zeabur (zeabur.com) suffered a multi-path intrusion after an attacker used long-lived plaintext internal AWS, GCP, and cluster administrator credentials to compromise its shared cluster across nine regions, run read commands inside 865 user database containers, sign in as root to 101 GCP Dedicated Servers (92 users), and dump the platform database.
Exposed Data Types
7- Email addresses
- Usernames
- Phone numbers
- API keys
- Auth tokens
- Service credentials
- Account settings
About This Breach
According to Zeabur's preliminary incident report published on October 19, 2026, the breach exposed 321,810 platform user accounts (email addresses, usernames, and phone numbers), 3,218,965 service environment variable records, 11,536 hashed Platform Access Tokens, 566 plaintext zSend API keys, and approximately 53 internal production secrets.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
