
Preliminary report detailing Railway's October 21st security incident.

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention
Commits pushed while Railway paused deployments on October 21 were not deployed. Redeploy the latest commit, reconnect GitHub, and recreate CLI and CI credentials to get your services deploying again.
Learn how to Security Disclosure Recommendation: Check for Anomalous GCP Access
Learn how to Security Disclosure Recommendation: Check for Anomalous AWS Access
Learn how to Security Disclosure Recommendation: Rotate MySQL Database Credentials
Learn how to Security Disclosure Recommendation: Rotate Redis Database Credentials
Learn how to Security Disclosure Recommendation: Rotate MongoDB Database Credentials
Learn how to Security Disclosure Recommendation: Check for Anomalous GitHub Access
Learn how to Security Disclosure Recommendation: Check for Unexpected Usage in Stripe