GoFaceless pauses service after Railway hosting security incident
nijfranck · x · 2026-10-22
AI video tool GoFaceless paused service for a few hours after hosting provider Railway reported a security incident on October 21 that affected many customers.
- Founder Franck says logs show someone used access from the incident to view database structure, but no sign customer data was read or changed.
- Passwords and card details are safe: Stripe handles all payments, and passwords are stored only in scrambled form unreachable by the exposed access.
- The app was paused as a precaution; users will be emailed when service returns.
More from Safety
- CISO greentext: our approvals take days, the attacker's AI agent just keeps typing — zephyr_z9 · 2026-10-22
- Railway Breach: Dev Says Claude Refused to Help with Hack Response, Slams Anthropic — adamamcbride · 2026-10-22
- Cloudflare saw thousands of php2shell exploit attempts before disclosure, millions now — ivan_bezdomny · 2026-10-22
- Amazon telemetry shows PHP2Shell exploited Oct 17, four days before disclosure — natesiggard · 2026-10-22
- FrankenTorch: a memory-safe clean-room Rust rewrite of PyTorch with 6,300+ commits — doodlestein · 2026-10-22
- Dev posts denied Cyber Verification Program screenshot, vows never to pay Anthropic again — arthurcolle · 2026-10-22