Railway probes possible exposure of customer secrets

Railway said an unauthorized third party may have accessed encrypted environment variables and obtained the decrypted contents of some.
The company urged all users to rotate environment variables and private registry credentials, and check service logs for unusual activity.
Deployments are paused during the investigation, preventing users from rolling out new versions until builds resume.
Railway said it will email customers it confirms were affected.

By passenger