Railway urges key rotation for all users after cyberattack

Railway urged all users to revoke and rotate their API and cloud keys after a cyberattack, TechCrunch reported. Railway said attackers may have accessed encrypted environment variables and obtained decrypted contents for some. Its initial analysis suggested the breach affected a subset of users, but its advice covered everyone. Railway also paused customer deployments while investigating. In TechCrunch’s Oct. 22 report, the company had not given a specific affected-user count or root cause.