// tag
Security incidents tagged Railway. Newest first.
› Railway (hosted platform)
On Oct 21 2026 Railway reported anomalous activity on systems storing customer environment variables. An unauthorized third party may have accessed encrypted env vars and, for some, obtained decrypted contents (API keys, DB/registry credentials). Railway says it believes this is part of a series of attacks on platform companies aimed at compromising AI inference providers, and asked upstream providers to revoke keys. Builds were paused platform-wide for ~a day; on Oct 22 they were restored for Enterprise and Pro, with Hobby/Free/Trial still pending. All users are told to rotate secrets while scoping continues.
Developer platform Railway told every customer to rotate all secrets after an intruder decrypted some stored credentials. Those environment variables hold database passwords, cloud keys and model API keys, letting anyone holding them sign in as the owner. Railway said a subset t.co/69pffCmiFq
🛑 Railway reports a security incident involving systems storing customer environment variables. An unauthorized party may have accessed encrypted secrets and, in some cases, decrypted contents. Railway has invalidated API tokens and urges users to rotate credentials. Details t.co/bsimFLmfPR
🚨BREAKING! "An unauthorised third party may have accessed encrypted customer environment variables and, in some cases, obtained the decrypted contents." That's Railway describing its own breach. • The incident: Railway disclosed unauthorised access to the systems storing
We've begun the process of ramping builds up We'll continue this into the evening, overnight, and into the morning. Tomorrow we will include a full post mortem We once again want to apologize for any inconvenience t.co/UaD21DIwzA
🚨BREAKING: RAILWAY has just disclosed MAJOR security incident. Customer API keys, database passwords, and other sensitive credentials may have been EXPOSED TO HACKERS. Railway is urging ALL customers to rotate their credentials IMMEDIATELY. And in an extraordinary move, the t.co/CXu72n1lMX
🚨BREAKING: @Railway reports a security breach in which an unauthorized third party may have accessed customer environment variables, potentially exposing API keys and database credentials. Railway urges users to rotate credentials immediately as deployments remain paused. t.co/RSYPPmTOpf
+2 more on the incident pages above.
