Zeabur follow-up on the October 2026 security incident

In October 2026, Zeabur's systems were breached and credentials stored on the platform, such as API keys, were exposed. Protecting those credentials was our responsibility, and we failed to do so. We are deeply sorry to everyone affected.

Under our current financial circumstances, we are unable to pay for third-party service charges arising from the October 2026 security incident. We understand this will disappoint affected users, and we are deeply sorry. We will help you request fee waivers or refunds from your third-party service providers to reduce your losses as much as possible.

Zeabur will cease operations on December 31, 2026. Any prepaid account balance remaining will be refunded through the refund process, and this applies equally to users affected by the October 2026 security incident.

Requesting fee waivers

If leaked credentials were misused and incurred charges, most cloud and API providers offer a dispute or fee-waiver process.

We have published our incident investigation report, which you can attach to your request as supporting information. If a provider asks for additional proof, please let us know through Zeabur Support and we will do our best to provide the relevant information.

If you have not yet revoked or rotated the keys stored on Zeabur, please do so as soon as possible and check your related bills for unusual charges.

Account balance refunds

Your account balance will be refunded in accordance with the refund application procedure and is not affected by this incident. For how to apply, see the original announcement.

If you have any questions, please contact us through Zeabur Support.

The Zeabur Team