Zeabur shuts after hack of 321,810 accounts

Zeabur, a firm that runs apps for software makers, will shut down after a hacker read 321,810 accounts. The attacker also read 3,218,965 stored settings, Zeabur said in its report of the 19th of October 2026.

Founder Yuanlin Lin wrote on the 17th of October that the firm chose to close after this latest attack. All Zeabur servers will stop by the 31st of December 2026, he wrote.

The attacker used Zeabur's own master keys on the 14th of October

An admin token works like a master key that lets staff run the whole system. Zeabur said the attacker used such tokens, kept in plain text and with no end date, from the 14th of October.

The attacker read Zeabur's main customer database on the 15th of October and entered 101 customer servers on Google's cloud, the firm wrote.

The attacker hunted AI keys, and 1 OpenAI key was used

An API key is a password that lets one program use a paid service. The attacker mostly hunted keys to AI services, Zeabur wrote.

Every try to use Amazon's Bedrock AI service failed, Zeabur wrote. One user's OpenAI key made about 1,107 image requests on the 16th of October, which Zeabur called a possible link.

Below we break down the 321,810 accounts

Dividing 3,218,965 settings by 321,810 accounts gives about 10 per account, by our arithmetic.

More than 16 hours of attack on the 14th of October set off no alarm, Zeabur wrote. From the first break-in to the final stop is 78 days, by our arithmetic.

The 321,810 figure counts accounts read. It leaves out how many stolen keys were later used, which Zeabur could not confirm.

Zeabur pauses services from the 1st of December

Zeabur asked every user to replace all passwords and keys stored with it, even ones changed after its August incident. Services start to pause on the 1st of December 2026, Zeabur wrote.

What is confirmed and what is not

Zeabur cannot confirm how the attacker got the master keys and guesses a link to its August incident. Zeabur has not yet set a date to delete customer data.

Key facts

Zeabur said a hacker read 321,810 accounts on the 14th and 15th of October 2026.

3,218,965 stored settings were also read.

Zeabur said the root cause lies with Zeabur.

All Zeabur servers stop by the 31st of December 2026.