According to CoinMeta, Railway reported a security incident where the system responsible for storing customer environment variables exhibited abnormal activity. Preliminary investigations suggest that unauthorized third parties may have accessed these encrypted environment variables, and in some cases, even obtained the plaintext of certain variables. These variables typically contain API, key, database passwords, and credentials for private image repositories. Railway suspects that this incident is part of a recent series of attacks targeting cloud platforms, with the ultimate target being AI's service providers. The company has notified relevant upstream service providers to proactively revoke the keys. Although it is initially believed that only some customers were affected, Railway still requires all users to immediately replace the keys stored on the platform and check their service logs for any abnormal calls. Railway temporarily suspended platform construction and deployment, preventing even enterprise customers from releasing updates. Construction functions were later restored, but users still need to redeploy their applications to make the replaced keys effective. In addition, Railway has proactively reset the keys for all buckets and the GitHub credentials saved on the platform, and affected users need to reconnect GitHub.