Railway PaaS Discloses Potential Unauthorized Access to Customer Environment Variables

Railway, a PaaS provider, discovered anomalous activity indicating a potential breach where an intruder may have accessed encrypted customer environment variables, with some decrypted data potentially exposed. The impact is limited to a subset of users, prompting the company to advise credential rotation.

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables.

Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a "subset of users,

Read original article