Security Disclosure: Wednesday October 21st
Summary
Railway disclosed a security incident where an unauthorized party may have accessed encrypted environment variables and, for some, decrypted contents. The company has paused deployments, revoked keys, and urged customers to rotate secrets and review logs while the investigation continues. They will issue updates as the scope narrows.