Railway Confirms Breach, Tells All Users to Rotate API and Cloud Keys

Cloud development platform Railway has urged "all users" to revoke and rotate their API and cloud keys after confirming that hackers accessed some customer secrets in a cyberattack.

In a blog post on Wednesday, the company said unidentified attackers "may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents." Environment variables are typically lists of passwords and API keys that developers' apps use to reach other services, such as cloud data storage and databases. Armed with those secrets, an attacker could log in and pull data as if they were the rightful owner.

Railway's initial analysis suggests the breach was limited to a "subset of users," the company said. It still advised that "all users" should revoke and rotate all of their keys so attackers cannot abuse them.

What does the breach mean for customers?

Railway has paused customer deployments while it investigates, effectively freezing customer websites and apps hosted on the platform. The company did not say how many users were affected or what caused the incident. It did not immediately respond to a request for comment about the attack, or whether it has received any correspondence from the hackers, such as a ransom demand.

It's also unclear how the attack unfolded or which Railway systems were compromised. Railway said the breach was likely part of a broader campaign targeting platforms "with the aim of compromising AI inference providers." These attacks involve tricking AI systems into leaking sensitive data through malicious prompts that push beyond their guardrails.

Is this part of a wider attack wave?

The incident lands amid a cluster of security events. Earlier this week, open source AI coding tool OpenCode said customer secrets had been breached in a similar attack, with hackers taking more than 1% of its customers' API keys and other secrets. OpenCode attributed the incident to an AI distillation attack, in which large numbers of agents work to extract sensitive information from AI models.

The Railway attack also comes soon after the U.S. cybersecurity agency CISA warned that China-based AI companies are conducting large-scale attacks on American firms with the aim of improving their own models.

Separately, two critical security vulnerabilities were publicly disclosed this week in PHP, the web programming language that powers roughly 70% of websites and public-facing internet systems. The Railway breach appears unrelated to those bugs, which pushed companies and governments around the world to pull down their sites and patch before attackers could strike.

Patches for the flaw, dubbed "PHP2Shell," went public on Wednesday after a globally coordinated effort that let large organizations fix their systems ahead of likely attacks. Security researchers at Amazon said they found evidence of exploitation four days before the patch release, suggesting the bugs are already being used in active attacks.

For Railway's customers, the immediate task is mechanical: rotate every key tied to the platform, then wait for deployments to resume. The company hasn't set a timeline for either.