Railway suffers cyberattack leaking customer keys, asks users to change API keys
Cloud hosting platform Railway discovered abnormal activity on October 21 in the system storing customer environment variables, stating that an unauthorized third party may have accessed encrypted environment variables and decrypted some of them, and has advised all users to change credentials such as API keys. Railway believes the attack may be part of a recent series of attacks targeting platform companies with the aim of breaching AI inference service providers, and has notified upstream suppliers to revoke potentially leaked keys. The company also released security guidance for OpenAI, Anthropic and GitHub users, advising them to delete potentially exposed API keys, generate new keys and check usage records; on October 23 its builds and deployments had recovered, but new user registration remained suspended.
Cloud hosting platform Railway discovered abnormal activity on October 21 in the system storing customer environment variables, stating that an unauthorized third party may have accessed encrypted environment variables and decrypted some of them, and has advised all users to change credentials such as API keys. Railway believes the attack may be part of a recent series of attacks targeting platform companies with the aim of breaching AI inference service providers, and has notified upstream supp
Matched fieldsSummary、Body