Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

What happened

In October, Railway experienced a security breach where attackers stole API keys for AI services from customer workspaces. The attackers used these keys to generate an estimated $740,000 in unauthorized charges to customers' AI provider accounts. Railway has stated it will cover these costs if the AI providers do not issue refunds. The company has also reset all affected credentials and notified users at high risk.

Key details

• Attackers decrypted environment variables in up to 1.85% of Railway's workspaces, affecting about 100,000 workspaces.
• The breach exposed AI provider keys, linked-account tokens for 1,852 users, and some cloud, database, and payment service credentials.
• No evidence was found that customer databases were accessed or that code repositories were downloaded.
• Refund policies vary by AI provider; some providers have started refunds, while others review claims individually or have no-refund policies.
• Railway advised customers to revoke and replace any sensitive credentials stored before October 21, and reset requests were sent to over 100,000 users.

Why it matters

Railway customers who stored AI provider keys on the platform face the risk of large unauthorized charges, with some already incurring costs. Railway's commitment to cover unreimbursed charges means affected customers may not have to pay out of pocket, but they must follow each AI provider's refund process and report disputed charges. Customers must also take immediate steps to secure their credentials and review their accounts for further risks.