Development platform Railway has confirmed that a cyberattack allowed hackers to access some customer secrets, prompting the company to urge all users to rotate their API and cloud keys amid fears of a broader breach of customer data.

The company, which allows customers to build apps and services on its cloud development platform, said in a blog post on Wednesday that the unidentified hackers “may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents.”

These environment variables are typically lists of passwords and API keys that are used by the developer’s apps to access other services, such as cloud data storage and databases. With these customer secrets, an attacker could also log in and access data as if they were the rightful owner.

Railway said that while its initial analysis suggests the breach was limited to a “subset of users,” it suggested that “all users” should revoke and rotate all of their keys so that attackers cannot abuse them.

The company also said it paused customer deployments while the company investigates, effectively freezing customer websites and apps.

Railway did not say how many specific users were affected, or what was the root cause of the incident. The company did not immediately respond to a request for comment about the incident, or whether it has received any correspondence from the hackers, such as a ransom demand.

It’s unclear how the attack went down or which Railway systems were compromised. ” These kinds of attacks involve tricking AI systems into leaking sensitive data through malicious prompts beyond their guardrails.

Source link