Previous incidents

We have published our preliminary report on the October 2026 Zeabur security incident. It details the attack paths identified so far, the scope of impact, the causes, and the remediation measures we have completed. The investigation is ongoing, and the report will be updated as new evidence becomes available.

The attacker used compromised internal credentials to access our shared clusters and some GCP dedicated servers, then read environment variables, account information, and project data f...

We have completed our investigation into the August 2026 Zeabur security incident and have now published the full incident report.

The report provides a detailed account of how the attacker exploited a vulnerability in a user-deployed service to gain access to our shared cluster, progressively escalated their privileges, and ultimately accessed our production environment. It also covers the confirmed scope of impact, the root causes of the incident, and the remediation measures we have compl...