Railway Breach Exposes 100,000 Workspaces, Generates $740,000 in Fraudulent AI Charges
Cloud hosting provider Railway disclosed a major cybersecurity breach where attackers exploited zero-day vulnerabilities to steal customer AI provider keys and cloud credentials. The stolen credentials generated approximately $740,000 in unauthorized AI usage charges across multiple platforms including OpenAI, Anthropic, and AWS Bedrock, potentially exposing environment variables for up to 100,000 customer workspaces.