TechRailway Blog1h ago
Cloud provider Railway says an unauthorized party may have accessed
Cloud provider Railway says an unauthorized party may have accessed customer encrypted environment variables and, for some, obtained the decrypted contents
TL;DRRailway hack exposed encrypted customer secrets; some decrypted credentials were stolen.
Why it matters: Environment variables often contain API keys and database passwords; affected developers need immediate secret rotation.
Earlier this morning, Railway detected anomalous activity involving systems that store customer environment variables.
Read full articleSource: Railway Blog · Opens in new tab