According to a formal security announcement by the cloud application deployment platform railway on October 21st, as reported by CoinMeta, the platform detected abnormal activity in the system that stored customer environment variables. Upon investigation, it was found that unauthorized third parties may have accessed some of these encrypted environment variables and obtained the decrypted content of certain variables, which included sensitive information such as API keys, database credentials, and private code repository access tokens. railway believes that this incident may be related to a series of recent attacks targeting cloud platform companies, and it is suspected that the attackers attempted to further infiltrate AI model inference service providers. The platform has notified relevant service providers to proactively revoke the keys and recommends that all users immediately rotate their API keys and other credentials, as well as check for any records of abnormal access.