Hackers broke into hosting company Railway and used stolen keys to run about $740,000 in AI charges. Customers should replace their keys and check their bills.
Railway, a cloud hosting service for developers, says hackers broke into its systems, stole customer secret keys and used some of them to run about $740,000 in unauthorized AI usage. Up to about 100,000 customer workspaces may have had their secrets exposed. If you run software on Railway, the main risk is a surprise bill from an AI provider.
The attack began on October 20. Railway says the intruders used a previously unknown flaw in its build systems to break out of their restricted area and grab an internal credential. With it, they copied Railway's own source code, the instructions that make the platform run, and studied it for more weak spots.
They then used a second flaw, a badly set up trust relationship between systems, to get the credentials that unlock customers' stored settings. Those settings, called environment variables, often hold passwords and API keys. An API key is a code that lets one program use another service, and whoever holds it can usually spend your money there.
Railway says the fight lasted roughly 26 hours, with attackers using AI-powered agents to hunt for weaknesses while its engineers closed them. It says the intruders were fully removed on October 21 and that every flaw they used has been fixed.
Railway says at most 1.85% of its workspaces, about 100,000, had decrypted secrets exposed. That is the maximum, not a confirmed count of stolen secrets. The attackers searched mainly for AI provider keys, though some searches also targeted cloud, database and payment service credentials.
Separately, 1,852 users had linked-account tokens exposed, including GitHub OAuth tokens and AI agent keys. An OAuth token is a pass that lets one service act on your behalf at another. Railway says it reset those tokens and notified the people affected.
Railway says it found no evidence that the attackers downloaded customer Git repositories or accessed customer databases. Most workspaces also fall outside the maximum group. Still, Railway has not said which accounts were hit, so anyone with secrets stored there should treat them as possibly exposed.
The steps in the alert box above cover the essentials: replace stored keys, check for charges you do not recognize, and set spending limits with your AI providers. Railway says it is working with the providers to reimburse customers, and it will pay any charges the providers decline to refund.
Railway believes the attackers wanted AI credentials to resell or to use in AI model distillation, a way of training one AI model using another. It links the incident to a wave of attacks on AI developer platforms that security firm Wiz calls Black October. Other targets include Northflank, OpenCode, Warp and Lightning AI. It is not yet known how many customers had secrets actually stolen. Watch for emails from Railway and your AI providers.
If your keys were stored on Railway, replace them now and watch your AI and cloud bills for charges you did not make.
A hacker used stolen Qubole keys to enter customers' Amazon cloud accounts and download data. Any company that ever linked Qubole to AWS should check.
Read more: Hackers used a data vendor's keys to steal from dozens of firmsApple says iCloud, Find My and Apple Account sign-ins are having problems. Email and logins may fail, and the fault is on Apple's side, not your device.
Read more: Apple confirms outage hitting iCloud, Find My and Apple AccountsA MediaPost scam column says business email scams hit companies hardest as AI writes fake emails that sound real, so one bad payment request can cost real money.
Read more: Business email scams hit companies hardest as AI fraud grows
