Cloud hosting platform Railway has issued an urgent advisory to its users following the detection of unauthorized access to its systems. The company’s investigation revealed that a third party may have gained access to encrypted environment variables stored on the platform, and in certain cases, obtained the decrypted contents. These variables typically contain sensitive information such as API keys and database credentials. Railway serves approximately 4.8 million users and hosts over 16 million services.
In response to the incident, Railway has instructed all users to immediately rotate their secrets and credentials as a precautionary measure. The company has temporarily halted all deployments while the investigation continues, though builds have been restored for Pro and Enterprise workspaces. The suspicious activity was part of a broader series of attacks targeting AI inference providers, who have been directly notified and advised to revoke their keys. Railway stated it would directly contact any users whose accounts are confirmed to be compromised.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
