Cloud Provider Railway Suffers Cyberattack Resulting in Stolen AI Keys

Cloud hosting provider Railway has published a report disclosing that it suffered a hack in October, according to a report by Lawrence Abrams at BleepingComputer. Railway says it believes the attack targeted AI provider keys for resale, and that unauthorized spend on the stolen keys was estimated at roughly $740K. The company states that attackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets, and through those credentials gained access to the AI provider keys. The figure reflects estimated unauthorized consumption rather than a confirmed tally. The material available does not say when the breach was discovered, how the infrastructure flaws were patched, whether the stolen keys have been revoked, or whether customers will be held responsible for any of the ~$740K in unauthorized spending. The timeline therefore currently ends with Railway's public report on the October incident.