Hi, my Google Cloud/Firebase project was suspended for suspected key misuse (account_hijacked).
I submitted an appeal, but after 9 days I still have no response.
This is now a production outage: about 1200 paying users cannot log in and trust for my application is starting to go down rapidly. The business impact this has is nothing short of a disaster, and the students that’s using the application to study for exams are panicking and asking for refunds.
What I already did:
- Removed exposed credentials from files/repos
- Rewrote Git history and force-pushed cleaned history
- Removed old test/dev files with hardcoded keys
- Tightened secret handling to prevent re-commit
What I am ready to do immediately when access is restored:
- Rotate/revoke all affected keys
- Apply strict key restrictions (referrer/IP/API allowlist)
- Move secrets to Secret Manager
- Review IAM, billing, and audit logs
I’m currently blocked because suspended status prevents console access.
Can anyone advise:
- how to confirm the appeal is active and not missing info, and
- whether I should only follow up in the same appeal thread, or if that will delay everything further?
