Railway, a cloud hosting platform, said in its incident report that an attacker got into its systems on October 20 and was removed on October 21. The attacker decrypted some customers' stored settings, called variables, for at most 1.85% of workspaces. That is about 100,000. Railway said unauthorized spending on the stolen keys is estimated to reach about $740,000. It said the attacker first used a flaw in its build system that Railway had not known about. Later it used a faulty cloud login rule to reach the database.
Railway said database logs show the attacker searching for AI provider keys. The attacker also read the stored records of 353 builds. It decrypted linked-account tokens for 1,852 users, and Railway reset all of them. Railway said forensics did not show customer databases being accessed. The 1.85% figure is an upper limit, because the logs list environments, not single variables. Railway has not established whether the attacker ran the services that used the keys or passed them to others. It said Wiz research describes a similar pattern but does not name this attacker.
Teams that keep AI keys in a hosting platform's variables should check whether their providers revoked those keys. Railway said another query also matched cloud, database and payment service credentials. It said it asked providers including Anthropic, OpenAI and Google to revoke keys, and that it is working with providers to refund the charges.