GoKawiilRailway discloses breach exposing customer environment variables
Railway said it detected unauthorized access to systems storing customer environment variables, with an intruder possibly viewing decrypted secrets such as API keys and database credentials for some accounts. The company has paused all deployments during its investigation and is urging all users to rotate environment variables and registry credentials as a precaution, even though it believes impact may be limited to a subset of accounts.