Zeabur Discloses Second Breach in Seven Weeks, Exposing API Tokens

Cloud deployment platform Zeabur disclosed a second breach in less than seven weeks, saying attackers accessed user secrets and some dedicated Google Cloud servers, putting connected credentials at risk. The company said exposed data included environment variables, account details, Zeabur API tokens and API keys for its zSend email service. Zeabur also said attackers obtained read access to an internal database and accessed some user-rented dedicated servers on Google Cloud without authorization. Zeabur placed the intrusion between 9 a.m. and 1 p.m. ET on Oct. 14 (13:00-17:00 UTC). It later expanded its initial account to include dedicated servers after first saying it had found no evidence those machines were affected. The disclosure follows a breach on Aug. 27 involving Zeabur’s legacy shared cluster.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to TokenPost.