Railway, a cloud development platform, confirmed a cyberattack that resulted in unauthorized access to customer secrets. The company stated that hackers may have accessed encrypted environment variables and decrypted their contents, which include API keys and passwords for third-party services.
While the initial investigation indicates that only a subset of users was affected, Railway has advised all customers to revoke and rotate their API and cloud keys. To facilitate the investigation, the company has temporarily paused all customer deployments, effectively freezing existing applications and websites.
Railway reported that the incident appears to be part of a larger campaign targeting platforms to compromise AI inference providers. The company has not disclosed the specific number of affected users, the root cause of the breach, or whether any ransom demands were received.
