RAILWAY PRELIMINARY REPORT: OCT 21ST SECURITY INCIDENT

Summary from the TLDR DevOps newsletter

Railway disclosed a security incident where an attacker accessed internal systems from October 20 to 22 to target AI provider API keys. Environment variables for approximately 100,000 workspaces, or 1.85% of the total, were potentially compromised. Railway revoked credentials with partner vendors and accelerated a rollout of single-tenant builder infrastructure.