The Canada Brief

Tech · 12 d ago

Server cabinet with network cables

Developer platform Railway urges all users to rotate their secret keys after a cyberattack

The company says an intruder may have accessed encrypted environment variables and, for some, obtained the decrypted contents. These often hold API keys and database passwords.

Railway's user base

4.8 million users

Railway has about 4.8 million users, and it urges all of them to rotate their secrets. It has paused deployments while it investigates.

What we know

  • Some customer secrets may have been read
  • Deployments are paused

Not yet

  • How many users are affected
  • How the attackers got in

The company says only a subset of users may be affected, but has not said how many or how the attackers got in.