Railway breached: encrypted env vars decrypted in attacks targeting AI inference providers
imjustnewatai · x · 2026-10-22
Railway disclosed that an unauthorized third party may have accessed encrypted customer environment variables on Oct 21 — and decrypted some of them. The vars may contain API keys and database/registry credentials. Railway believes this is part of a recent series of attacks on platform companies aiming to compromise AI inference providers, and has asked upstream providers to proactively revoke all keys. All users are urged to immediately roll all env vars and private registry credentials and review logs. All deployments are paused while the investigation continues.
More from Infra
- DeepSeek's controlled inference benchmarks praised as the most compelling roofline curves yet — teortaxesTex · 2026-10-22
- Altman calls Cerebras' 1200 token/s Astra model the biggest 'red pill moment' of his life — alexcovo_eth · 2026-10-22
- Splash 1.4.0 hits 120 tok/s on M5 Pro with Qwen3.8-Flash-Next, plus open-source DFlash 2 drafter — HanGuo97 · 2026-10-22
- BigQuery ObjectRef goes GA: query unstructured data in SQL with Gemini — rseroter · 2026-10-22
- Why we invested in Daytona: autonomous agents will devour sandbox compute — pzakin · 2026-10-22
- Image-to-video in ComfyUI without a local GPU: Forma custom nodes, pay-as-you-go from $5 — no3us · 2026-10-22