The app-hosting platform says an intruder accessed, and in some cases decrypted, customer environment variables, and is urging a full credential rotation.
The Hacker News reports that cloud application platform Railway disclosed an intrusion in which an attacker may have accessed customer environment variables, and in some cases viewed their decrypted contents, affecting a subset of workspaces. Railway said the attacker appeared to be after AI provider API keys, reportedly to run distillation attacks, and worked with GitHub, GitLab, Anthropic, OpenAI, OpenRouter, Stripe and others to revoke potentially compromised keys. The company rotated its own bucket credentials, invalidated its API tokens, and restored builds for Pro and Enterprise workspaces.
Railway is urging every customer to rotate secrets stored on the platform before October 21, 2026, including API keys and private registry credentials, and to review GitHub, GitLab and container registry audit logs for unusual activity. It also recommends removing public network access to databases hosted on the platform.
Why it matters: API keys for AI providers are now a direct target in platform breaches, not just an afterthought. Any team that runs CI/CD, model access or production secrets through a hosted cloud platform should treat credential rotation as routine and keep AI provider keys scoped and short-lived.