Railway breach: all customers told to rotate secrets as deployments pause
alex_verem · x · 2026-10-22
Railway disclosed on Oct 21 that anomalous activity was detected in the systems storing customer environment variables; an unauthorized party may have accessed encrypted variables and, for some, the decrypted contents.
- Railway believes this is part of a broader attack wave targeting platform companies and AI inference providers, and has asked upstream providers to revoke keys
- All customers are told to rotate every environment variable and private registry credential and review logs
- Deployments are paused; updates at status.railway.com. Even non-users should note env vars hold API keys and DB passwords.
Related event: Railway breach exposes encrypted env vars, users urged to rotate all keys(11 posts)→
More from Infra
- 8x NVIDIA DGX Spark cluster with 200GB switch becomes SF's new flex — beffjezos · 2026-10-22
- NVIDIA Cosmos-3-Nano world models go live on Reactor's robot inference cloud — chris_j_paxton · 2026-10-22
- Abacus.AI CEO beta-tests GPU-hosted apps on SuperComputer, runs 3D flying-car game — bindureddy · 2026-10-22
- 2-bit draft in VRAM + exact residual in RAM: speculative decoding for models that don't fit your GPU — Happy_Guitar3521 · 2026-10-22
- Seroter's daily list: OpenAI models land on Google Cloud, PHP CVEs, Genkit Go 1.14 — rseroter · 2026-10-22
- inference.net tops OpenRouter third-party hosts at 14% share, serving ~10% of daily volume — Ronangmi · 2026-10-22