Railway Pauses Deployments After Possible Secret Access

Railway said an unauthorized party may have accessed customer environment variables, including some values that may have been decrypted, and paused all deployments while it investigates. The cloud development platform urged every user to replace stored secrets, including API keys and database and registry credentials, even though its initial analysis suggests only a subset of users may be affected. The company disclosed the incident on October 21, after detecting unusual activity in systems that store the variables. Those values contain settings and credentials applications use to connect to other services. Railway has not said how many accounts may be affected, identified the attacker or explained how access occurred. Its report of possible access to some decrypted values does not establish that encryption was broken. Railway said customers should immediately rotate all environment variables stored on the platform and review service logs for unusual activity. It said it will email customers directly as it confirms affected accounts. The company also published guidance for checking connected services, including cloud and AI-provider accounts, for suspicious access or usage....