Incident Report: October 21st Security Attack

Railway published a detailed incident report on a sophisticated security attack that occurred on October 21st, during which a threat actor compromised build infrastructure and exfiltrated a subset of customer environment variables, particularly targeting AI provider credentials. The company evicted the attacker, invalidated affected tokens and user sessions, and accelerated the deployment of new, heavily hardened build infrastructure. Open article →