Railway tells all users to rotate keys after hackers decrypted some customer secrets
Cloud app platform Railway said an attacker reached the systems that store customer environment variables and decrypted some of them. It told every user to rotate API keys and other credentials stored on the platform.
Cloud app platform Railway said an attacker reached the systems that store customer environment variables and decrypted some of them. It told every user to rotate API keys and other credentials stored on the platform. (Railway blog; TechCrunch)
Railway paused new builds and deployments while it investigated and has warned upstream providers so they can revoke keys. It believes a subset of users was affected but has not given a number. Railway linked the breach to a wider wave of attacks on platform companies aimed at compromising AI inference providers, and CEO Jake Cooper told TechCrunch a post-mortem will follow. (Railway blog; TechCrunch)