Security AlertHigh
Railway says hackers stole secrets and drove $740,000 in AI charges
Nov 10, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Railway says attackers stole customer secrets, internal code and credentials, then generated about $740,000 in fraudulent AI usage. Up to 100,000 workspaces may have been affected.
Key points
- Attackers exploited two vulnerabilities in Railway’s infrastructure.
- Up to 1.85% of workspaces, or about 100,000, may be affected.
- Linked-account tokens for 1,852 users were reset.
Why it matters
Companies using hosted development tools should treat stored secrets as a high-value target. A breach like this can lead to account misuse, unexpected cloud charges and extra cleanup work.
Who’s affected: Railway customers and linked accounts
What to do
- Rotate exposed secrets and credentials.
- Review cloud, database, payment and AI provider access.
- Check linked accounts and reset tokens if notified.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.