Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said. Railway, which builds and runs apps for its customers and stores their secrets such as API keys and database credentials, has promised to pay those charges itself when an AI provider will not refund them.