Postiz shuts down citing suspected Railway compromise after Anthropic and Stripe key-leak alerts
seanwbren · x · 2026-10-22
Open-source social media tool Postiz has shut down service for all customers, suspecting its hosting platform Railway has been compromised.
- The team received emails from Anthropic and Stripe warning that their API keys were compromised
- They say Railway "won't tell us" what happened and are investigating on their own
- Developer seanwbren urges other devs to check whether their Railway accounts are affected
The scope may extend beyond Postiz: any PaaS-level compromise of Railway could expose other customers' keys and workloads.
Related event: Railway Breach: Encrypted Env Vars Decrypted, API Keys Drained in Real Time(9 posts)→
More from Companies & People
- "It's bad out there rn": Cloudflare DE lead urges everyone to put sites behind Cloudflare — threepointone · 2026-10-22
- Sophont CEO: AI labs promise cancer cures patients won't see for a decade — iScienceLuvr · 2026-10-22
- Study of 331 Microsoft developers finds AI speed gains but a 'hollow orchestrator' risk — rseroter · 2026-10-22
- Nathan Lambert: AI world will get 'crazier and scarier' before it gets better — natolambert · 2026-10-22
- Tesla Q3 earnings: Musk fields 21 questions on Robotaxi costs, FSD revenue and Optimus — XFreeze · 2026-10-22
- UC Berkeley opens joint Statistics×EECS tenure-track hire in Trustworthy AI — jasondeanlee · 2026-10-22