DevelopingSafety
Railway says October attackers targeted AI provider keys, with about $740K in unauthorized spend
Railway's incident report says an attacker had access from Oct. 20 to Oct. 21 and decrypted a subset of customer environment variables, specifically targeting AI provider credentials. It estimates about $740,000 in unauthorized spend and says up to 1.85% (about 100,000) of workspaces could have had variables decrypted. Railway is working with providers on refunds.
- HEAT
- OUTLETS
- 5
- NEW IN 6H
- +1
- FIRST SEEN
- LAST SIGNAL
Made the five · #4 on Wednesday, November 11, 2026
Railway breach: attackers ran up $740K on stolen AI keys
Primary source
Railwayblog.railway.com/p/incident-report-october-security-incidentCoverage · 5 articles, oldest first
Tuesday, November 10, 2026
Cyber Security News
cybersecuritynews.com/railway-details-data-breach/The Wall Street Journal
wsj.com/tech/ai/hackers-hunt-for-ais-most-valuable-commodity-computing-power-4c2054d5