Railway Breach Exposes Up to 100,000 Workspaces After Attackers Steal AI Credentials for $740,000 in Fraudulent Usage

Railway disclosed that attackers exploited two previously unknown vulnerabilities in its build infrastructure starting October 20 to escape filesystem isolation and access internal credentials. The threat actors retrieved Railway's source code, analyzed it to find additional weaknesses, and then abused an improperly configured trust relationship to decrypt and steal customer environment variables. The incident affected a maximum of 1.85 percent of workspaces, or roughly 100,000, though the exact number of stolen secrets remains unconfirmed. Stolen credentials were used to generate approximately $740,000 in unauthorized AI usage, with Railway committing to cover any unreimbursed charges from providers. The company also reset GitHub OAuth tokens and AI agent keys belonging to 1,852 users. Railway linked the campaign to the broader "Black October" wave of attacks against AI platforms including Northflank, OpenCode, Warp, and Lightning AI, and stated that all attackers were removed by October 21 with vulnerabilities now remediated.

BleepingComputerNovember 10, 2026Translated from English

Read at source

Railway has published a detailed incident report confirming that a sophisticated attack on its cloud hosting platform resulted in the theft of customer authentication secrets and roughly $740,000 in fraudulent AI usage charges.

The breach began on October 20 when attackers exploited an unknown vulnerability in Railway's build infrastructure to escape filesystem isolation and obtain an internal credential. They used this access to retrieve build histories and a copy of Railway's internal source code, which they analyzed to identify further attack paths.

A second vulnerability involving an improperly configured trust relationship then allowed the threat actors to reach systems storing decrypted customer environment variables. Railway described the following 26 hours as a high-speed contest in which both sides used AI-powered agents to probe and harden infrastructure in parallel.

The company stated that attackers specifically searched for AI provider credentials, although some queries also targeted cloud, database, and payment service secrets. The stolen credentials were subsequently used to generate approximately $740,000 in unauthorized AI usage. Railway is working with affected providers to reimburse customers and will cover any charges the providers decline to refund.

In addition, linked-account tokens belonging to 1,852 users, including GitHub OAuth tokens and AI agent keys, were exposed. Railway has reset those tokens and notified the affected users.

The incident has been linked by security firm Wiz to a wave of attacks against AI developer platforms dubbed "Black October," which has also targeted Northflank, OpenCode, Warp, and Lightning AI. Railway found no evidence that customer Git repositories or databases were downloaded.

GitHub Wiz Railway Northflank Lightning AI Black October

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Breaches & Leaks

Breaches & Leaks

Nitori Confirms Breach Exposing 37.62 Million Customer Records

Japanese furniture retailer Nitori disclosed a major data breach in which attackers accessed internal systems and potentially stole 37.62 million customer records. The intrusion was first detected on November 6, 2026, though evidence indicates the attacker had been present since mid-October. Exposed data includes names, email addresses, postal addresses, telephone numbers, dates of birth, gender, membership numbers, and order details for both individual and corporate customers. Account passwords and credit card information were not compromised in the incident. Nitori has notified Japan’s Personal Information Protection Commission and law enforcement, and is warning affected customers about possible phishing and scam risks. The company has blocked the unauthorized access, patched vulnerabilities, and enhanced monitoring to prevent recurrence.

BleepingComputerNov 10, 2026Translated from English

Breaches & Leaks

Fireworks AI Discloses Follow-Up Breach After Third-Party Cloud Provider Hack Exposes Customer Metadata and Partial Model Weights

Fireworks AI has reported a second security incident in October 2026 after a third-party cloud provider was breached, allowing attackers to reach the company's development machines. The threat actors accessed resource metadata, billing information, and incomplete model weights and datasets belonging to some customers. No customer payment card numbers were exposed because Fireworks does not store them. The company linked the activity to a financially motivated cybercriminal group focused on LLMjacking, the unauthorized use of stolen API keys to run large language models through illicit gateways. Fireworks responded by revoking credentials, isolating systems, and engaging Palo Alto Networks Unit 42 for further investigation. Earlier in the month the same group had obtained environment variables containing API keys and tokens from a limited number of accounts.

BleepingComputerNov 10, 2026Translated from English

Breaches & Leaks

SEGA Newsletter Data Breach Exposes 2.2 Million Email Addresses via Third-Party Provider ARARA

Japanese gaming giant SEGA has disclosed a data breach at its third-party newsletter provider ARARA that exposed the email addresses of 2.2 million subscribers. The incident also affected 92,300 records containing additional undetermined information across 11 SEGA and SEGA Fave newsletters. No customer names, dates of birth, addresses, phone numbers, credit card details, or passwords were exposed, and SEGA Account emails remained unaffected due to a separate distribution system. ARARA's breach impacted nearly 380 clients and 77 million email addresses overall, with other victims including MOS Burger and Shochiku Multiplex Theatres. Attackers also abused ARARA's systems to send over 7 million phishing emails impersonating credit card companies. SEGA Arcade services remain offline from a separate, unrelated incident involving ALL.Net and Aime networks.

BleepingComputerNov 9, 2026Translated from English