Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

In October 2026, Railway suffered a data breach in which an attacker exploited a previously unknown flaw in its build system to escape filesystem isolation and obtain internal credentials. Using these, the attacker accessed a production database and decrypted environment variables from approximately 100,000 workspaces, specifically targeting AI provider API keys. The stolen keys were used to generate an estimated $740,000 in unauthorized AI service usage. The attacker also obtained GitHub OAuth tokens and cloud credentials, though no customer database access or code repository exfiltration was confirmed. Railway has taken responsibility for covering costs where providers do not issue refunds and has since hardened its systems, including isolating builds in short-lived VMs and rotating all potentially exposed credentials.

AI-extracted · verify before operational use