Railway Pauses Deployments After Possible Customer Credential Exposure

Railway paused deployments across its cloud platform after saying a preliminary investigation found an unauthorized party may have accessed encrypted customer environment variables and may have obtained decrypted contents from some. Railway detected unusual activity in the system holding customer variables for its deployment platform. Those variables may include API keys, database credentials and credentials for private image repositories. Railway urged every user to rotate environment variables, API keys and private repository credentials stored on its service, then review the relevant service logs.

Source: TokenPost