Railway breach timeline: crypto theft began 2 hours before users were told to rotate keys
banteg · x · 2026-10-22
Developer tayvano pieced together the full timeline of Railway's Oct 21 security incident, exposing a slow and costly response:
- 07:24 builds paused; 09:28 the API, CLI and dashboard went fully offline with only generic "we're investigating" updates for hours;
- 19:36 the first known crypto theft transaction hit the blockchain;
- 21:11 customer Postiz said Stripe and Anthropic notified them their keys were compromised and pulled the plug proactively;
- 21:51 Railway finally announced the incident and advised rotating keys — over 14 hours after the first outage and 2+ hours after the first theft.
Follow-up posts reveal the build and storage infrastructure was breached, with stored bucket credentials rotated (a Railway employee appears in customer audit logs), forcing a mass revocation of API keys, private registry credentials and environment variables. The poster calls the timeline "an ambulance-chasing lawyer's wet dream": outage first, theft second, disclosure last.
More from Infra
- Open tool computes API vs. RunPod self-hosting breakeven across 450+ models, with VRAM sizing — zackku · 2026-10-22
- SemiAnalysis deep-dive: Huawei Ascend 950PR hits 86% median MFU, beating all Nvidia chips, but only A100-tier compute — teortaxesTex · 2026-10-22
- NVIDIA shows off DGX Spark clusters, Vera Rubin NVL72 trays at GTC Berlin — NVIDIAAI · 2026-10-22
- Court Filing: Meta Told Board It Needs to Raise Hundreds of Billions Starting Fall 2026 — firstadopter · 2026-10-22
- RTX 5090 hotspot hits 98°C in ComfyUI workloads, owner asks for comparisons — HrothgarLover · 2026-10-22
- whatmodel: open-source tool matches local AI models to your RAM and GPU from 22k benchmarks — JeremyCMorgan · 2026-10-22