Skip to main content
Question

Production project suspended for “hijacked resources” – customer data locked in Cloud SQL, appeal pending, requesting escalation

  • Nov 3, 2026 6:16 AM UTC
  • 0 replies
  • 0 views

francis_nexhrm

Hello Community Managers and Google team,

Our production Google Cloud project was suspended on 2 November 2026 for “abusive activity consistent with hijacked resources”. We received no prior warning.

  • Project ID: imposing-gadget-465000-n9
  • Appeal ticket: IBTPVFDWXUZDKLVH3KXNP4OEQU

The project runs NexHRM, a multi-tenant HR and payroll platform that businesses rely on daily. The whole service is down, and our customers’ data is in Cloud SQL inside the suspended project, so we can’t restore the service anywhere else.

We believe a third party compromised our credentials. Since receiving the notice, we have:

  • Disabled all service account keys on the project
  • Begun auditing our codebase and deployment configuration for exposed credentials

We can’t finish remediating (reviewing logs, removing unauthorised resources) because every console page redirects to the appeal form.

We kindly request either:

  1. Escalation of our appeal to Trust & Safety for an expedited review, or
  2. Temporary, restricted access so we can export our Cloud SQL database and complete remediation.

We will cooperate fully and can verify ownership through official channels.

Thank you.