Railway’s preliminary report says up to 1.85% of workspaces—about 100,000—may have had environment variables compromised; it urges all users to rotate sensitive credentials stored before October 21.

The title, authors and October 22 source date of Railway’s preliminary report on its October 21 security incident; public release was confirmed by the October 23 status update.

Published 23 Oct 2026 · 19:37 UTC

Railway ↗ · Source dated 22 Oct 2026

Browse all Live updates · Read Features