Zeabur shutting down after second security breach in two months
Zeabur, a development platform, suffered a second security breach within two months after an attacker accessed internal credentials stored in plaintext, exposing over 3.2 million environment variable records and data from more than 321,000 accounts. The company is shutting down following the incident.
Why this matters: Environment variables are where developers store secrets — API keys, database passwords, tokens that connect services together. Losing 3.2 million of them is not like losing names and email addresses. It means attackers potentially have the keys to everything those accounts were connected to. Storing credentials in plaintext in 2025 is a basic, avoidable failure. The people most exposed here are developers whose downstream systems and users may now be at risk, through no fault of their own.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.