Railway urges all users to revoke keys after cyberattack

Developer platform Railway confirmed a cyberattack in which hackers may have accessed encrypted environment variables and decrypted some of them. The company told all users to revoke and rotate their API and cloud keys and paused customer deployments while it investigates.

• Hackers may have obtained decrypted environment variable contents
• Railway advises all users to rotate API and cloud keys
• Customer deployments paused during the investigation
• Attack may be part of a campaign targeting AI inference providers