Railway Urges Users to Rotate Credentials After Security Incident.

Railway is asking customers to replace credentials stored on its cloud deployment platform after an intrusion may have exposed customer environment variables, with some values already decrypted, putting API keys and database passwords at risk. Its initial investigation found that an intruder may have accessed the service holding customer variables. The company has not disclosed how many accounts were affected or how access occurred, and said it would contact accounts confirmed to be affected. Railway advised all users to rotate every key and password stored on the platform, although the potential exposure may involve only some customers.

Also reported by The Defiant.

Source: TokenPost