This week, our team has focused on responding to a security incident, restoring affected systems, and helping customers secure their credentials. We're deeply sorry for the disruption and the additional burden this has placed on you.
October 21 security incident
The incident involved unauthorized access to internal Railway systems. We took steps to contain it and restore affected services, and we're working with external incident response experts to understand the impact. Our investigation is ongoing.
Please read our preliminary incident report for what happened, the impact, and our response. We'll share a follow-up as our investigation concludes.
As a precaution, we recommend that all customers revoke and replace sensitive credentials stored on Railway before October 21. Please also:
- Remove public network access to databases.
- Review GitHub audit logs and installed app access.
- Check container registry audit logs for unexpected activity.
If you have questions or need help, contact support@railway.com.