Railway, a vibe-coding platform for hosting apps and websites, was hacked and customer environment variables (think passwords, API keys, and other sensitive secrets for logging into cloud services and databases) were stolen *and* decrypted.
More: https://techcrunch.com/2026/10/22/developer-platform-railway-urges-all-users-to-revoke-secret-keys-after-cyberattack/
Bypass for ad-blockers: https://web.archive.org/web/20261022142947/https://techcrunch.com/2026/10/22/developer-platform-railway-urges-all-users-to-revoke-secret-keys-after-cyberattack/
Zack Whittaker
npub1tn…ay0nr
2026-10-22 14:31:57 UTC
Author Public Key
npub1tnd8wwd5ux624dj36094wh9ax9utku8ahnxk4d367e9tlpg458qqvay0nrSeen on
wss://relay.ditto.pubPublished at
2026-10-22 14:31:57 UTCEvent JSON
{
"id": "a793831c737ae7b6c27f4181af88f5d8b968cee5eaa87a6bea40fc89c4871c9b",
"pubkey": "5cda7739b4e1b4aab651d3cb575cbd3178bb70fdbccd6ab63af64abf8515a1c0",
"created_at": 1792679517,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/zackwhittaker/statuses/117485044834489911",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Railway, a vibe-coding platform for hosting apps and websites, was hacked and customer environment variables (think passwords, API keys, and other sensitive secrets for logging into cloud services and databases) were stolen *and* decrypted. \n\nMore: https://techcrunch.com/2026/10/22/developer-platform-railway-urges-all-users-to-revoke-secret-keys-after-cyberattack/\n\nBypass for ad-blockers: https://web.archive.org/web/20261022142947/https://techcrunch.com/2026/10/22/developer-platform-railway-urges-all-users-to-revoke-secret-keys-after-cyberattack/",
"sig": "0ff243eacc2438c92830c4ee0d2d210fe0ada8e5160a41b93d3d4d0dd7efcbf30140d9116cac57749e89ae5b13780303e0b4a24e54999801662fc34feec3df3c"
}