Railway Says Hackers May Have Decrypted Customer Secrets in AI-Targeted Attack

Railway Security(Compromise) Disclosure

Railway detected unauthorized access to systems storing customer environment variables, with some decrypted contents potentially exposed. The company suspects the breach is part of a campaign against platform providers to compromise AI inference providers, and has notified upstream partners to revoke keys. All deployments are paused while the investigation continues, and Railway urges every user to immediately roll all environment variables and private registry credentials and review logs for unusual activity.