Railway Urges Users to Rotate API Keys Following Cyberattack on Development Platform
Cloud development platform Railway has confirmed a cyberattack that potentially exposed customer secrets, including encrypted and some decrypted environment variables. These variables often contain sensitive passwords and API keys used to access databases and cloud storage. While the company believes the breach is limited to a subset of users, it has advised all customers to revoke and rotate their keys immediately to prevent unauthorized access. As part of its investigation, Railway has paused customer deployments, effectively freezing websites and applications hosted on the platform. The incident appears linked to a broader trend of attacks targeting AI inference providers through methods like AI distillation. This follows similar recent breaches at OpenCode and warnings from CISA regarding large-scale cyber activities by China-based entities.
Topics: AI infrastructure security API key compromise cloud security cyberattack data breach