Railway: unauthorized third party may have accessed customer environment variables

PaaS provider Railway disclosed anomalous activity related to systems that store customer environment variables. The company said an unauthorized third party may have gained access to encrypted environment variables and, in some cases, obtained the decrypted contents, with impact limited to a subset of users. Railway urged customers to rotate credentials.