Railway cloud hosting provider discloses security breach exposing customer API keys and credentials.
Security & Exploits ·
Railway, a cloud hosting provider, disclosed on October 21st that unauthorized third parties may have accessed encrypted environment variables stored on its platform, with some decrypted contents potentially exposed. The compromised data could include API keys, database credentials, and registry credentials. The incident was detected after anomalous activity was identified in systems storing customer environment variables.
Railway's investigation suggests the breach may be part of a coordinated campaign targeting platform companies and AI inference providers. The company stated it has notified upstream providers to revoke keys proactively and paused all deployments while the investigation continues. While initial analysis indicates limited impact to a subset of users, Railway is recommending all customers immediately rotate their environment variables and API keys as a precaution.
The scope of affected accounts remains under review. Railway indicated it will contact directly affected customers by email with additional details and will provide updates on the company's status page as the investigation progresses and deployments are restored.