By Hamza Faisal

Cloud hosting platform Railway is telling all of its customers to replace every stored secret after an intruder may have read customer environment variables — including the API keys that unlock AI services like OpenAI and Anthropic.

Railway published the disclosure on October 21, written by Jacob Cooper, after detecting anomalous activity that morning in the systems that store customer environment variables. Its initial investigation found an unauthorized third party "may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents." Those variables can hold API keys, database passwords, and private registry credentials.

Hunting AI provider keys

Railway believes the breach is part of a wider campaign: "a series of attacks recently targeting platform companies with the aim of compromising AI inference providers." A Railway employee said publicly that stealing AI credentials appeared to be the attacker's primary goal. A stolen AI key lets an attacker burn through expensive model calls billed to someone else's account — AI inference providers are companies like OpenAI, Anthropic, and OpenRouter that bill by usage through API keys. Security firm GitGuardian notes the pattern echoes the Vercel incident from April.

Builds frozen, keys revoked

Railway's response was sweeping: all builds and deployments were paused platform-wide (restarted in stages, with Enterprise workspaces first), all Railway API tokens were invalidated, OAuth sessions were invalidated, and storage bucket credentials were rotated. The company notified upstream providers so they could revoke potentially compromised keys, and published 13 step-by-step security guides covering database credential rotation and misuse checks for AI, cloud, GitHub, and Stripe accounts. A formal postmortem is promised after the investigation completes, and affected customers will be emailed directly.

The $371,000 crypto question

Blockchain investigator Taylor Monahan has linked about $371,000 in crypto theft — across more than 500 transactions on at least 19 EVM chains — to the incident, with the first known theft timed at 19:36 UTC on October 21, more than two hours before Railway disclosed anything. Railway has not confirmed the crypto losses and has not said whether blockchain private keys were exposed.

Railway says early analysis suggests a limited subset of users may be affected — but everyone should act as if exposed. The company reported in January 2026 that more than 2 million developers and tens of thousands of companies, from small shops to Fortune 500 firms, build on it. It has not said how many customers were affected, or how the attackers got in.

By Hamza Faisal