Railway urges users to revoke API keys after cyberattack exposes customer secrets

Cloud hosting platform Railway has urged all users to replace their API keys and other stored credentials after discovering a cyberattack that may have exposed sensitive customer data. In an October 21 blog post , the company said an unauthorised third party may have accessed encrypted environment variables and decrypted some of them. Environment variables can contain sensitive information, including API keys, database passwords and private registry credentials.