POPA ReconRailway got hacked 💀
Source reports
- Railway got hacked 💀 Customer secrets may have been exposed, including API keys & DB credentials. If you use Railway, do this NOW: Railway’s recommended actions 🔐: - Rotate ALL secrets: API keys, DB passwords & environment variables. - Rotate private container/package registry… — @vishalsingh2972 (X), Oct 21, 2026, 22:44 UTC
- 🚨BREAKING: RAILWAY has just disclosed MAJOR security incident. Customer API keys, database passwords, and other sensitive credentials may have been EXPOSED TO HACKERS. Railway is urging ALL customers to rotate their credentials IMMEDIATELY. And in an extraordinary move, the… — @markgadala (X), Oct 22, 2026, 00:00 UTC
- 🚨 ALERT: Railway says hackers may have accessed customer environment variables, including API keys and database credentials, urging all users to rotate their secrets as it pauses deployments to investigate. — @Cointelegraph (X), Oct 22, 2026, 01:21 UTC
- 😓 С PHP вроде разобрались, теперь новые хаки Часа 4 назад, облачный хостинг Railway признался: кто-то залез в систему, где хранятся env-переменные клиентов, и часть секретов достал уже в расшифрованном виде. Это API-ключи, пароли от баз и доступы к реестрам образов. Сами Railway… — Закрепи.sender, Oct 22, 2026, 02:02 UTC
- 😓 С PHP вроде разобрались, теперь новые хаки Часа 4 назад, облачный хостинг Railway признался: кто-то залез в систему, где хранятся env-переменные клиентов, и часть секретов достал уже в расшифрованном виде. Это API-ключи, пароли от баз и доступы к реестрам образов. Сами Railway… — AGGREGATOR, Oct 22, 2026, 02:02 UTC
- 🗞️ Need to catch up on the news? Here's our top 10 from today: 🔸 Lighter CEO Vladimir Novakovski says the company will apply for a US derivatives license next month and integrate into Robinhood’s US offering once approved. 🔹 Railway says hackers may have accessed customer… — @Cointelegraph (X), Oct 22, 2026, 03:15 UTC
- What a brutal day today... Major vulns people are struggling to fix right now - PHP2Shell allows unauthenticated remote code execution on affected PHP servers. CISA is advising organizations to patch or take affected systems offline (this is absolutely nuts, basically the… — @giovignone (X), Oct 22, 2026, 03:32 UTC
- ‼️ Your entire infrastructure could be one security breach away from chaos. RAILWAY disclosed major security breach This is a wake-up call for every developer. Never assume your secrets are safe just because they’re stored on a trusted platform. Keep offline backups of critical… — @DealsDhamaka (X), Oct 22, 2026, 03:48 UTC
- Railway disclosed that an unauthorized party may have accessed encrypted customer environment variables and obtained some decrypted contents. Railway paused deployments and urged customers to rotate secrets and review service logs. — @PopaRecon (X), Oct 22, 2026, 04:35 UTC
- ⚠️ ALERT: $369K+ in suspected wallet drains flagged amid Railway’s security breach, that may have exposed customer secrets. A suspected attacker wallet moved at least $369,300 to HitBTC and other addresses, per Onchain Lens. It also received funds from an address linked to the… — @coinbureau (X), Oct 22, 2026, 05:52 UTC
Excerpts are quoted from the linked sources, which own their text.