Follow us on Google News
NEW DELHI: Cloud hosting platform Railway has suffered a major cybersecurity breach in which attackers accessed customer authentication secrets to generate approximately 740,000 dollars (around 6.5 crore rupees) in unauthorised artificial intelligence usage. The threat actors managed to extract platform source code alongside sensitive variables stored within user environments. An internal investigation indicated that secrets across up to 1.85 percent of workspaces, representing roughly one lakh accounts, were potentially exposed, though the company noted that this figure does not confirm that data was actually stolen from all of them.
The company initially issued a security advisory on October 22, instructing customers to rotate their secrets and credentials, before publishing a comprehensive incident report detailing the intrusion vector and subsequent impact. According to findings, the attackers initiated the compromise on October 20 by exploiting an unrecognised flaw within Railway’s build infrastructure. This vulnerability allowed them to break out of file system isolation and acquire an internal platform credential.
Attackers Exploited Chained Vulnerabilities to Reach Core Infrastructure
Armed with this preliminary credential, the intruders gained access to stored build histories and obtained a copy of the company’s internal source code. After reviewing the codebase to uncover further attack vectors, they identified a second vulnerability tied to a misconfigured trust relationship. Exploiting this secondary flaw allowed the attackers to advance deeper into Railway’s production environment.
Through this elevated access, the threat actors obtained credentials responsible for decrypting customer environment variables. These variables commonly store API keys, database passwords, cloud service credentials, and other critical access parameters. The compromise of such values presents substantial risks of unauthorized entry into customer software repositories, external cloud environments, and linked third-party services.
AI Agents Deployed in Rapid Twenty-Six-Hour Escalation
The intrusion unfolded over approximately 26 hours, evolving into a fast-paced engagement between offensive and defensive teams. During this period, the attackers leveraged AI-powered agents to scan and probe multiple segments of the infrastructure for additional flaws, while Railway’s engineering team worked simultaneously to seal entry paths and neutralize active sessions. The event went beyond a standard one-time breach, developing into a protracted technical countermeasure operation against adaptive automated tools.
Investigators discovered that the attackers were primarily focused on locating credentials related to AI service providers. The automated scans specifically searched for logins and API secrets capable of querying various AI models and related external systems, though credentials associated with databases, general cloud providers, and payment gateways were also targeted.
Company Pledges Full Reimbursement Amid Industry Wave
The compromised credentials were subsequently used to rack up approximately 740,000 dollars in illicit AI compute charges, leaving several affected customers facing substantial unexpected invoices. Railway announced that it has partnered with the affected AI vendors to secure refunds for impacted users. The company also committed to paying those charges directly if service providers refuse to issue charge reversals for the fraudulent usage.
The breach further compromised linked account tokens belonging to 1,852 users, including GitHub OAuth tokens and AI agent integration keys. Railway revoked and reset all affected tokens and notified the account holders, eliminating the risk of unauthorized downstream actions through external developer tools. The company assessed that the perpetrators sought AI keys for resale or for running model distillation processes. The incident is believed to be connected to a broader cyber campaign known as Black October, which previously hit platforms including Northflank, OpenCode, Warp, and Lightning AI. Railway confirmed that all intruders were expelled by October 21 and the exploited flaws were remediated. Investigators found no evidence that customer Git repositories were downloaded or that customer databases were accessed.
