Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Platform-as-a-service provider Railway has disclosed anomalous activity related to systems that store customer environment variables, The Hacker News reports. The company found that an unauthorized third party may have gained access to encrypted environment variables and, in some cases, obtained the decrypted contents, with the impact limited to a subset of users. BleepingComputer’s version was dropped as a duplicate.