Railway Pauses Deployments After Possible Customer Credential Exposure

Railway paused deployments across its cloud platform after saying a preliminary investigation found an unauthorized party may have accessed encrypted customer environment variables and may have obtained decrypted contents from some.

Railway detected unusual activity in the system holding customer variables for its deployment platform. Those variables may include API keys, database credentials and credentials for private image repositories.

Railway urged every user to rotate environment variables, API keys and private repository credentials stored on its service, then review the relevant service logs. The instruction covers the full customer base even though the preliminary finding describes possible access to encrypted values and decrypted contents from only some variables.

Railway also notified upstream service providers and asked them to revoke keys. All deployments remain paused as the company responds.

Railway believes the incident is part of a recent series of attacks targeting platform companies in attempts to reach AI inference providers.