Attackers Steal AI Credentials and Run Up $740,000 in Charges on Railway

Cloud hosting provider Railway confirmed a roughly 26-hour attack that began October 20, when hackers exploited a previously unknown build-infrastructure vulnerability and escaped filesystem isolation. They searched databases for AI provider keys first, then cloud, database, and payment credentials, and generated about $740,000 in fraudulent AI usage charges, with potential access to up to 100,000 workspace credentials. Railway advised users to revoke and reissue sensitive environment variables stored before October 21.

Why it matters: Teams running AI workloads on hosted platforms need to rotate exposed API keys and treat AI provider credentials as high-value secrets, since attackers are monetizing them through resale and model distillation.