Railway says attackers escaped build isolation on 20 October, then used a misconfigured trust relationship to reach credentials that decrypt customer environment variables. Up to about 100,000 workspaces may have been exposed, and stolen credentials led to roughly $740,000 of unauthorised AI usage. Railway describes a roughly 26-hour contest in which the attackers used AI agents to find flaws. Railway advised customers to rotate secrets, which matters most for any AI provider keys stored there.
