Developer platform Railway urges all users to rotate API keys after cyberattack

Platform says hackers accessed encrypted environment variables, with decrypted contents obtained for some customers

By LineZotpaper

Published22 October 2026

Read Time2 min

Cloud development platform Railway has confirmed that hackers gained access to customer secrets, prompting the company to urge all users to revoke and rotate their API keys and cloud credentials. The breach, which the company says may have been part of a broader attack targeting AI inference providers, has led Railway to pause deployments while it investigates.

Railway, a platform that lets developers build and host apps in the cloud, disclosed in a blog post Wednesday that unidentified hackers “may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.” These environment variables typically contain passwords, API keys, and other secrets that apps use to connect to services like databases and cloud storage.

The company recommended that “all users” rotate their keys, warning that attackers could use the stolen secrets to log in and access data as if they were the rightful owner. Railway said its initial analysis suggests the breach was limited to a “subset of users,” but it did not provide a specific number or disclose the root cause.

Railway said the incident was likely part of a campaign targeting platforms “with the aim of compromising AI inference providers”, a technique known as AI distillation, where attackers trick AI systems into leaking sensitive data through malicious prompts.

The breach follows a similar incident this week at open-source AI coding tool OpenCode, which said hackers stole more than 1% of its customers’ API keys and other secrets. OpenCode attributed that attack to AI distillation. Earlier this week, the US Cybersecurity and Infrastructure Security Agency (CISA) warned that China-based AI companies are conducting large-scale attacks on US companies with the aim of improving their own models.

The Railway attack appears to be separate from two critical security vulnerabilities in the PHP programming language that were publicly disclosed this week. Patches for the bug, dubbed “PHP2Shell,” were released Wednesday, with security researchers at Amazon reporting evidence of exploitation four days earlier.

Analysis

Why This Matters

Exposed API keys and cloud credentials can give attackers persistent access to developers’ systems, leading to data theft, service disruption, or supply-chain compromise.
The attack highlights a growing trend of AI distillation attacks, where adversaries target developer platforms to extract secrets from AI models and inference systems.
Railway’s pause on customer deployments means affected apps and sites are frozen until the investigation is complete, potentially disrupting services built on the platform.

Background

Railway is a cloud development platform used by developers to build and deploy web apps. The company stores environment variables (sensitive configuration data) on behalf of its users. AI distillation attacks involve tricking AI systems into revealing information they are not supposed to share, often through carefully crafted prompts. Cybersecurity authorities have warned about nation-state actors using such techniques to collect intelligence or improve their own AI capabilities.

Key Perspectives

Railway: The company has responded by urging all users to rotate their keys and pausing deployments. It has not detailed the attack vector or how many users were affected, but says it is investigating. OpenCode: The open-source coding tool suffered a similar breach this week, which it attributed to AI distillation, reinforcing the pattern Railway described. US cybersecurity authorities: CISA has warned about China-linked AI companies conducting large-scale data-collection attacks on US firms, placing these incidents in a broader geopolitical context.

What to Watch

Whether Railway discloses the root cause or number of affected users in follow-up updates.
Whether other developer platforms report similar breaches, indicating a wider campaign.
The exploitation status of the PHP vulnerabilities, which may be used in parallel attacks on web infrastructure.

Sources

Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack · TechCrunch

Checked

12 claims in this story checked against 1 source: 8 supported.

Show each claim

Partly supportedHackers accessed encrypted environment variables, and decrypted contents were obtained for some customers.TechCrunch: ““may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.””
Partly supportedRailway confirmed that hackers gained access to customer secrets.TechCrunch: “Railway has confirmed that a cyberattack allowed hackers to access some customer secrets”
SupportedRailway urges all users to rotate their API keys after the cyberattack.TechCrunch: “the company to urge all users to rotate their API and cloud keys”
SupportedRailway said hackers “may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.”TechCrunch: ““may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.””
SupportedRailway’s initial analysis suggested the breach was limited to a subset of users.TechCrunch: “Railway said that while its initial analysis suggests the breach was limited to a “subset of users,””
SupportedRailway said the breach was likely part of a broader attack targeting platforms to compromise AI inference providers.TechCrunch: “Railway said that the breach was likely part of a broader attack targeting platforms “with the aim of compromising AI inference providers.””
Partly supportedThe Railway campaign is described as AI distillation, a technique involving malicious prompts that trick AI systems into leaking sensitive data.TechCrunch: “These kinds of attacks involve tricking AI systems into leaking sensitive data through malicious prompts beyond their guardrails.”
SupportedOpenCode said hackers stole more than 1% of its customers’ API keys and other secrets in a similar attack.TechCrunch: “Earlier this week, open source AI coding tool OpenCode said customer secrets had been breached in a similar attack, with hackers taking more than 1% of its customers’ API keys and other secrets.”
Partly supportedCISA warned earlier this week that China-based AI companies were conducting large-scale attacks on US companies to improve their models.TechCrunch: “The latest breach comes soon after U.S. cybersecurity agency CISA warned that China-based AI companies are conducting large-scale attacks on U.S. companies with the aim of improving their own models.”
SupportedThe Railway attack appears separate from two critical PHP vulnerabilities publicly disclosed this week.TechCrunch: “The Railway attack appears to be separate from two critical security vulnerabilities publicly disclosed in the PHP web programming language this week”
SupportedPatches for PHP2Shell were released Wednesday.TechCrunch: “Patches for the bug, dubbed “PHP2Shell,” were publicly released on Wednesday”
SupportedAmazon security researchers reported evidence of exploitation four days before the patches were released.TechCrunch: “Security researchers at Amazon said they found evidence of exploitation four days before the patch releases”