Bollcoin, October 22 — According to an official announcement from Railway, the cloud deployment platform Railway detected abnormal activity in the system that stores customer environment variables. A preliminary investigation shows that an unauthorized third party may have accessed the encrypted environment variables and obtained the decrypted contents of some of them. The affected variables may include API keys, database and image registry credentials, and more. Railway believes this incident is part of a recent series of attacks targeting platform companies with the aim of compromising AI inference service providers, and has notified upstream service providers to proactively revoke keys. Railway has currently paused all deployments and recommends that all users immediately rotate environment variables, API keys, and private repository credentials stored on the platform, and review relevant service logs.