| Security Disclosure(blog.railway.com) | |
| 590 points by passenger 4 days ago | 334 comments | |
tl;dr: Railway detected unauthorized access to systems storing customer environment variables, with some encrypted secrets potentially decrypted by attackers. The breach appears part of a broader campaign targeting platform companies to compromise AI inference providers. All users are urged to rotate API keys, database credentials, and registry credentials immediately; deployments are paused during the investigation. | |
HN Discussion:
| |