Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Railway, a Platform-as-a-Service provider, has reported unusual activity in systems storing customer environment variables. An investigation revealed that an unauthorized party may have accessed encrypted environment variables and potentially obtained decrypted contents. The company stated that the impact is limited to a subset of users. Railway is urging affected customers to rotate their credentials. The breach may have exposed customer secrets. The company's disclosure was made to inform and protect affected users.