Railway Notifies Customers After Secret Exposure as Crypto Theft Reports Emerge

The cloud platform confirms potential exposure of customer credentials and is notifying affected users. Reported crypto losses remain independently unconfirmed. Railway is notifying customers affected by a security incident involving stored application secrets, as separate reports link exposed credentials to cryptocurrency theft. The cloud platform said on October 21 that an unauthorised party may have accessed encrypted customer environment variables and, in some cases, their decrypted contents. Its latest status update, at 03:00 UTC on October 23, said notification emails were still being sent. Railway has confirmed the potential credential exposure.