宝玉 (@dotey) · 10/22/2026, 06:37:30
Railway Breach Exposes Environment Variables; Users Urged to Rotate Keys Immediately
Cloud hosting platform Railway suffered a breach in its secret storage system, potentially exposing decrypted environment variables including API keys and database passwords. The company has paused all deployments and urged users to rotate credentials immediately. This marks the second major security incident targeting AI developer platforms recently, with attackers seemingly aiming at inference provider credentials like those for OpenAI and Anthropic.
SOURCE COVERAGEFull Original Report
Railway’s secret storage system has been compromised, with some secrets potentially decrypted; the company is urging all users to rotate their keys immediately, and deployments are currently paused.
Developers running applications on Railway should immediately rotate all environment variables stored on the platform, including API keys, database passwords, and credentials for private container registries (where packaged applications are stored). They should also audit logs for these services. On October 21, Railway announced that a system storing customer environment variables was accessed by an external party, and some of this data may have been decrypted into plaintext. This marks the second incident within a week involving platforms that manage AI keys for developers.
Railway is a cloud hosting platform where developers submit code for packaging, deployment, and execution. Applications rely on numerous "keys," such as database passwords and API keys for calling OpenAI or Claude (usage-based access tokens that allow anyone who possesses them to incur costs on your account). These keys are not hardcoded into the application but are stored separately on the platform as environment variables.
[Official Statement]
Railway stated that preliminary assessments suggest only a subset of users may be affected. The company will send email notifications once specific impacts are confirmed but recommends that all users rotate their keys immediately. Details regarding how the attacker gained access, the number of affected users, and the method used to decrypt the keys have not yet been disclosed.
All deployments are currently paused, preventing any user from releasing new versions. A significant complication arises because rotated keys require a redeployment to take effect. If old keys are revoked at the service provider level before rotation, live services may experience outages. Railway has not provided guidance on whether to revoke keys first or wait. As of approximately 6 AM Beijing time on October 22, all users, including those on Enterprise plans, remain unable to deploy, with no estimated time for restoration.
[Why AI Keys Are Targeted]
Railway believes this intrusion is part of a recent series of attacks targeting platform companies, specifically aiming at AI inference providers like OpenAI and Anthropic that sell model access based on usage. The company has notified these providers to proactively revoke relevant keys. Railway did not name other affected platforms, and no related reports have been found at this time.
The situation closely resembles the incident involving the AI coding tool OpenCode. On the night of October 16, its web dashboard was breached, potentially exposing OpenAI, Anthropic, and Google keys stored by 1.4% of its users. According to reports from TechCrunch and others, some users incurred charges ranging from hundreds to over $1,700 overnight. OpenCode linked this breach to a large-scale "distillation attack," where models are trained using massive amounts of output from other models. Neither company has claimed a connection between the two incidents.
Sources:
- Railway Announcement: https://t.co/SPOEWR6nvO
- Railway Status Page: https://t.co/N1szncftat
- OpenCode Incident (TechCrunch): https://t.co/USlsP9MxlZ
↳ Quoting @Railway (Railway): An urgent notice from the Railway team
https://blog.railway.com/p/security-disclosure-wednesday-october-21st