Odaily Planet Daily report: The cloud application deployment platform Railway has issued a security notice stating that on October 21, anomalous activity was detected in the system storing customer environment variables. Preliminary investigations indicate that an unauthorized third party may have accessed some encrypted environment variables and obtained decrypted contents of certain variables, including sensitive information such as API keys, database credentials, and private image repository credentials.
Railway stated that this incident may be related to a series of recent attacks targeting platform companies, with attackers allegedly attempting to compromise AI inference service providers. The platform has notified relevant upstream service providers to proactively revoke the keys.
Preliminary analysis suggests the impact may be limited to certain users, but Railway still recommends that all users immediately rotate environment variables, API keys, and private registry credentials stored on the platform, and review related service logs for any unusual activity.
Railway has paused all deployments, and the new version release is temporarily unavailable. The platform stated that it will directly notify affected customers via email once impacted accounts have been confirmed, and will continue to provide updates on the investigation.