Railway said an intruder may have accessed encrypted environment variables and obtained decrypted contents for some of them, potentially exposing API keys, database or registry credentials; it suspected a broader campaign targeting AI inference providers, but said impact might be limited to a subset of users. Railway’s October 21 disclosure

Railway said an intruder may have accessed encrypted environment variables and obtained decrypted contents for some of them, potentially exposing API keys, database or registry credentials; it suspected a broader campaign targeting AI inference providers, but said impact might be limited to a subset of users. Railway’s October 21 disclosure

Rotate all Railway environment variables, API keys and private registry credentials, and review service logs for unusual activity, as Railway advised. Railway said it would contact affected customers directly as it confirmed which accounts were affected. Railway’s disclosure

As of October 22, builds were available to Pro and Enterprise workspaces, though some were failing and deployments were queued; Railway was still working to enable Hobby, then Free and Trial. Railway Status

A developer alleged about $370,000 in crypto was stolen through exposed secrets, and Railway Enterprise customers had resumed deployments, but the report does not establish that the drained wallets’ keys were stored on Railway or independently confirm the full amount. The Defiant’s report