Security Disclosure: Wednesday October 21st
- Earlier this morning, Railway detected anomalous activity involving systems that store customer environment variables.
- After further investigation, our investigation to date indicates that an unauthorized third party may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.
- Environment variables may contain secrets such as API keys or database and registry credentials.
Unverified
- Earlier this morning, Railway detected anomalous activity involving systems that store customer environment variables.
- After further investigation, our investigation to date indicates that an unauthorized third party may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.
- Environment variables may contain secrets such as API keys or database and registry credentials.
Sources: Railway