Railway detected abnormal activity in its system storing customer environment variables, revealing that an unauthorized third party may have accessed encrypted data and obtained decrypted contents of some variables. The compromised information potentially includes API keys, database credentials, and image registry access details. The platform identified the incident as part of a broader series of attacks targeting infrastructure companies to compromise AI inference service providers. Railway has paused all deployments and notified upstream service providers to proactively revoke affected keys. Users are advised to immediately rotate all environment variables, API keys, and private repository credentials stored on the platform and review relevant service logs.