Key facts
- Hackers may have accessed encrypted environment variables and obtained decrypted contents.
- Attackers could use compromised secrets to log in and access data.
- Railway paused customer deployments during the investigation.
Development platform Railway has confirmed that a cyberattack allowed hackers to access some customer secrets, prompting the company to urge all users to revoke and rotate their API and cloud keys. The unidentified hackers may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents, which typically include passwords and API keys. Railway said that while its initial analysis suggests the breach was limited to a subset of users, it suggested that all users should revoke and rotate all of their keys. The company also paused customer deployments while it investigates. The breach was likely part of a broader attack targeting platforms with the aim of compromising AI inference providers, according to Railway. This incident follows a similar attack on open source AI coding tool OpenCode earlier this week.