Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

PaaS provider Railway disclosed Wednesday that an unauthorized third party may have accessed encrypted environment variables, and in some cases obtained decrypted contents. The company said the impact is limited to a subset of users and urged credential rotation. The breach stems from anomalous activity in systems storing customer secrets.