Railway reports environment variable breach, urges credential rotation, and pauses deployments

What happened

Railway said on October 21 that attackers accessed its customer environment variable system and may have decrypted some secrets. It advised all users to rotate credentials, although its preliminary assessment suggested only some users were affected. Deployments remained paused as of shortly after 6 a.m. Beijing time on October 22, complicating rotation because replacement credentials require redeployment to take effect; no restoration time was given.

The story so far

Railway said attackers accessed its customer environment variable system and may have decrypted some secrets; it urged all users to rotate credentials, but deployments remained paused as of shortly after 6 a.m. Beijing time on October 22. Railway’s preliminary assessment suggested only some users were affected, though its rotation advice applied to everyone. The deployment pause complicated that advice because replacement credentials require redeployment to take effect.

Keep reading

Trending now

1. 1Mistral and NVIDIA Announce Industrial Engineering AI Collaboration and Open Benchmarks
2. 2Anthropic Opens Claude Duet Research Preview With Waitlist for US Pro and Max Users
3. 3OpenAI Models and Codex Workflows Coming to Google Cloud, With Reports Differing on Availability
4. 4Mistral Releases Voxtral 3 Speech Models, Voice Agents API and LiveKit-Based SDK