Skip to main content
Question

Urgent – Google Cloud Project Suspended (ACCOUNT_HIJACKED) – Business Impact

  • April 22, 2026
  • 8 replies
  • 89 views

vince5959
Forum|alt.badge.img+1

Hello,

My Google Cloud project has been suspended due to a security issue (ACCOUNT_HIJACKED).

I fully understand the situation and I am ready to take all necessary actions to secure the project. However, I currently do not have access to the project anymore, which prevents me from revoking the compromised API keys or applying the required fixes.

As a precaution, I have already stopped billing to prevent any further charges.

At the moment, my application is completely down, which is having a severe impact on my business. My clients cannot access the service, and I am receiving increasing complaints and refund requests.

I already have an open support case: 70327888

This situation is becoming critical, and I would greatly appreciate any help to restore access or guidance on how I can proceed to secure the project.

Thank you very much in advance for your support.

Vincent

8 replies

fernandoredondo
Forum|alt.badge.img+2

I have the exact same issue. Still no reply to the appeal after 2 weeks.

Wondering if there’s an alternative to get the application up and running again? Perhaps creating a new account, export everything from firebase etc., to the new account. 


freya0207
Forum|alt.badge.img
  • New Member
  • April 23, 2026

Short D+8 update — and one practical suggestion addressing Fernando's "new-account export" question.

 

@vince5959 @fernandoredondo — I'm a third owner caught in the same pattern, sharing my D+8 status and a narrower sub-request that may be directly useful for Fernando's question.

 

Where I am at D+8:

 

- Suspended 2026-04-16 (revents-29bba, AI Nomusa — a Korean labor-law compliance platform).

- Appeals: April 16 (initial), April 18 (supplementary), April 22 (comprehensive consolidated — 23 remediation actions completed, root cause identified as an accidental .gitignore edit overwrite, no account compromise, zero anomalous charges during the exposure window).

- April 22: separate Korean-language complaint filed with Google Korea 국내대리인 (the legally designated local representative under Korean ICT Act Article 32-5, which carries a statutory response obligation in Korea).

- Today (D+8) I received a brief follow-up asking for additional information on remediation and project behaviors, and replied in-thread with a direct summary of my April 22 submission (English + Korean translation).

 

No restoration decision yet.

 

On Fernando's "2 weeks no reply / alternative route" question:

 

Fernando — you asked whether there is an alternative route like creating a new account and exporting from Firebase. I went down exactly this path, and I want to flag something practical for anyone else considering it:

 

With a CONSUMER_SUSPENDED project, every data API (Firestore, Cloud Storage, RTDB, even Firestore PITR clone to a different project) returns an authentication error, so a standard user-side export is not possible. Firebase Troubleshooter also required a paid Standard support plan with an Organization, which is unavailable to sole-developer projects.

 

The only mechanism I found that could plausibly work is to ask Google directly, as part of the appeal, for read-only data access or a one-time data export, to be processed in parallel with — and strictly before — the final restoration decision. I framed it as a narrow sub-request: no compute reactivation, no new attack surface, purely a data-preservation mechanism for the suspended project's Firestore / Cloud Storage / RTDB contents.

 

My specific justification was statutory third-party harm: my project provides digital pay stubs that are legally required under Korean Labor Standards Act Article 48 (administrative fines up to ₩5,000,000 per worker per violation), and the April payroll cycle in Korea ends on April 25 / 30. If you or @vince5959 have similar third-party-harm context (employees, customers, regulators, other statutory timers), stating it explicitly alongside the primary appeal seems to be the one mechanism that doesn't rely on restoration happening first.

 

I don't know yet whether Google will grant this sub-request — I'll report back either way.

 

Why I'm posting this publicly:

 

The more of us who keep our cases visible here, the harder it is for any single suspension to quietly turn into a multi-week or multi-month invisible wait. If you received a similar brief follow-up recently, consider replying here too — the pattern matters.

 

I'll post another update when there's a substantive response, or at D+14 if not.

 

— @freya0207


vince5959
Forum|alt.badge.img+1
  • Author
  • New Member
  • April 24, 2026

Unfortunately, I still have no updates regarding case #70327888…

My business is completely at a standstill, and I have had no response from technical support.

I regularly contact the billing support team, but there is very little they can do on their end…

I truly hope the project can be reactivated today—my business depends on it. Every day I receive complaints from my clients, requests for cancellations, and PayPal disputes because my app is no longer accessible.

At this point, I really don’t know what else to do… it’s very frustrating not to have any timeline or response from them. You truly feel powerless. It feels like years of work are falling apart :(


mystatus
Forum|alt.badge.img
  • New Member
  • April 24, 2026

Hi Vincent,

Sorry to hear this. Since the project was suspended for ACCOUNT_HIJACKED, only Google Cloud Support can safely restore access or guide recovery.

Please keep updating case 70327888 and clearly mention that your app is down, clients are affected, and you cannot access the project to revoke keys or secure it. Also provide proof of ownership, billing details, project ID, and the steps you already took, such as stopping billing.

Avoid sharing sensitive details publicly here. Hopefully Support can review and restore limited access so you can secure the project.


Kragekjaer
Forum|alt.badge.img+1
  • New Member
  • April 24, 2026

Im facing the same problem, my project has been suspended for 3 weeks now, it is so frustrating and years of work for a dog community app is slowly vanishing. SO frustrating and I feel so helpless.

Case-id: [removed by moderator]


fernandoredondo
Forum|alt.badge.img+2

Hello ​@vince5959 

May I ask where you created your support case? I would love to do the same thing since I still haven’t received an answer to my appeal and have no way in getting contact with anyone in order to escalate it.

My fear is that I will receive an answer to the appeal, then I will answer in turn, and have to wait another 3 weeks for a response to that, etc.


vince5959
Forum|alt.badge.img+1
  • Author
  • New Member
  • April 24, 2026

@fernandoredondo 

The support case was created by the Google team when they suspended my account during the attack. I’ve been replying directly in that case.

This happened last Saturday, and the Safety team contacted me today. I really hope my account will be reactivated today. 🙏🏻🙏🏻🙏🏻🙏🏻🙏🏻🙏🏻🙏🏻🙏🏻🙏🏻


fernandoredondo
Forum|alt.badge.img+2

@vince5959 

Do you mean that you replied to the “appeal recieved” email that Google sent you — is that the support case?