[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-railway-breach-ran-up-roughly-740000-in-stolen-ai-charges":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},12857,"railway-breach-ran-up-roughly-740000-in-stolen-ai-charges","Railway Breach Ran Up Roughly $740,000 in Stolen AI Charges","A zero-day in Railway's build servers led to customer AI keys being abused, and up to 100,000 workspaces could have had their variables decrypted.","Some Railway customers had their AI API keys stolen and used to run up roughly $740,000 in unauthorized charges, the cloud hosting company said in an incident report.\n\nRailway hosts websites, APIs and databases for developers. Many customers store AI service keys as environment variables on the platform so their apps can call models. The attackers started with a zero-day (a flaw the vendor did not know about) in Railway's build infrastructure, which let them \"partially escape filesystem isolation\" and read files on the host virtual machines. Those files held a credential for a subset of internal systems.\n\nFrom there, the path widened. The credential unlocked Temporal, Railway's internal task management system, where the attackers found a copy of the internal codebase. It contained a misconfigured authentication mechanism, which gave them temporary cloud credentials. Those led to a production database of encrypted customer environment variables, along with information on how to decrypt them.\n\nThe attack ran from about 07:28 UTC on October 20 to 09:24 UTC on October 21, some 26 hours. The charges came from coding agents and AI training pipelines. Railway believes the keys were likely sold, possibly to fund model distillation, where a smaller model is trained on the outputs of a larger one. It estimates environment variables in up to 100,000 workspaces could have been decrypted, but says that is an upper limit, not a confirmed count.\n\nRailway said it also faced what it called a contest of agent speed, defending against \"abliterated models\" (models modified to remove built-in refusals) and a harness similar to ARTEX, according to Wiz, a cloud security company. Railway has closed the vulnerabilities, rebuilt affected infrastructure and rotated credentials. It is working with AI providers on refunds and says it will cover losses the providers refuse to reimburse.\n\nThe instructive detail is the encryption. Encrypting customer secrets does little if the material needed to decrypt them sits within reach of the same internal systems an intruder can walk through. Stolen cloud keys have long been resold for things like crypto mining; here the prize was paid AI access. Whether the decryption reached anywhere near 100,000 workspaces is still unanswered.","[\"railway\",\"data-breach\",\"ai-api-keys\",\"cloud-security\"]","2026-11-11T14:54:03.000Z","2026-11-11T16:11:57.624Z","2026-11-11T16:11:57.903Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The lede overstates the source by saying customers who kept AI keys on Railway had them stolen, when Railway only says up to 100,000 workspaces could have been decrypted (an upper limit, not a confirmed count), so rewrite it to say some customers' keys were stolen and drop 'anyone in that group' framing. Also cut the unsupported 'offered no independent evidence' aside and the speculative 'defenders now face attackers' conclusion, briefly explain who Wiz is, and keep 'roughly' on the $740,000 fig","resolved","security",[32,33,34,35],"railway","data-breach","ai-api-keys","cloud-security",[37],{"name":38,"url":39},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fcloud-hosting-firm-railway-says-recent-breach-leads-to-usd740-000-in-fraudulent-ai-charges",0,{"sections":42},[43,48,52,57,62,67,72,77,82,87,92,97,102,107],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",7144,"2026-11-12T13:27:45.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":51},"Security",1128,"2026-11-11T18:05:00.000Z",{"name":53,"slug":54,"count":55,"latest_published_at":56},"Deals","deals",642,"2026-11-12T14:00:00.000Z",{"name":58,"slug":59,"count":60,"latest_published_at":61},"Policy","policy",619,"2026-11-12T12:53:36.000Z",{"name":63,"slug":64,"count":65,"latest_published_at":66},"Consumer Tech","consumer-tech",364,"2026-11-12T11:12:32.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Hardware","hardware",336,"2026-11-12T11:24:43.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Science","science",230,"2026-11-12T10:00:00.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Software","software",168,"2026-11-11T17:36:49.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",159,"2026-11-11T12:30:00.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Dev Tools","dev-tools",127,"2026-11-11T19:00:44.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",118,"2026-11-11T16:49:42.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Gaming","gaming",107,"2026-11-12T10:09:03.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":108,"slug":109,"count":110,"latest_published_at":111},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]