Railway is compromised and reports are that attackers are actively draining keys. Rotate any API keys stored in railway immediately.

First reported Oct 21, 2026, 22:11 UTC

Source reports

Railway is compromised and reports are that attackers are actively draining keys. Rotate any API keys stored in railway immediately. Deployments are down so unfortunately this means many deployments will wind up broken, but it is better than the alternative. Internet D-Day — @0xQuit (X), Oct 21, 2026, 22:11 UTC
⚠️ PSA: If you use Railway, please rotate your keys immediately https://x.com/varunram/status/2113013688731083228 — Закрепи.sender, Oct 21, 2026, 23:16 UTC
⚠️ PSA: If you use Railway, please rotate your keys immediately https://x.com/varunram/status/2113013688731083228 — Rickler Feed, Oct 21, 2026, 23:16 UTC

Excerpts are quoted from the linked sources, which own their text.