Incident Report: October 21st Security Attack

Railway experienced a large-scale security incident on October 21st in which an attacker chained exploits and obtained environment variables for up to 1.85 percent of workspaces. The company reports that the attacker specifically targeted AI provider credentials for use in distillation. Railway subsequently revoked compromised keys, invalidated user sessions, and accelerated the rollout of a hardened build infrastructure. Open article →