Railway Pauses All Deployments After Customer Environment Variable Breach

Cloud platform Railway has disclosed a security incident involving unauthorised access to systems that store customer environment variables. The company detected anomalous activity yesterday and has since paused all deployments while it investigates the full scope of what happened. The core of the disclosure is this: an unauthorised third party may have accessed encrypted environment variables stored on Railway’s platform. Moreover, for some of them, they obtained the decrypted contents. Environment variables are the settings and secrets applications need to run: API keys, database credentials, registry credentials.

Source: TheNewsCrypto