Railway paused all deployments after attackers may have read decrypted environment variables (blog.railway.com)
Railway believes the attack is part of a wider campaign against platform companies and AI inference providers, and has asked upstream providers to revoke keys. Deployments are paused during the investigation.
In the Railway Discord, users say stolen keys were already being used, and one says usage climbed on keys created only for Railway, 10 hours into the incident.
Sign in to save