· ai-devtools
Railway breach leads to $740,000 in fraudulent AI charges
Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate about $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces.
The company disclosed the incident on October 22, warning customers to rotate their secrets after detecting unauthorized access to systems storing environment variables. In a new incident report published today, Railway confirms that attackers gained access to its internal source code and the decrypted customer environment variables for at most 1.85% of its workspaces, or about 100,000.
The company says this figure represents the maximum number of potentially impacted workspaces, rather than the confirmed number whose secrets were stolen. The attack began on October 20, when hackers exploited a previously unknown vulnerability in Railway's build infrastructure to escape filesystem isolation and obtain an internal credential.
