
Railway hack: attackers broke in to steal AI keys. TLDR: • Hackers were inside Railway's systems for ~38 hours • They weren't after user accounts. They wanted stored OpenAI, Anthropic and other AI keys • Goal, per Railway: use victims paid AI accounts to copy top models cheaply • They attacked using uncensored AI models and heavy compute • Up to ~100,000 workspaces had secrets potentially exposed • GitHub, OpenAI, Anthropic, Stripe and others revoked keys Your AI key is now a credit card with no limit. Set a spend cap and rotate it today.
