{"data":{"id":"45ceb416-d0f5-4581-bcde-a63b67589853","title":"Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill","summary":"Attackers breached cloud host Railway over a roughly 26-hour period starting October 20, chaining an unknown build-infrastructure flaw and a misconfigured trust relationship to decrypt about 100,000 customer environment variables (at most 1.85% of workspaces). They ran up about $740,000 in fraudulent AI usage charges using stolen AI provider keys, which were then resold for model distillation.","solution":"Railway advised users to revoke and reapply sensitive environment variables stored on Railway prior to October 21, remove public network access to databases, rotate sensitive variables and keys, check GitHub account audit logs and app access, and check registry audit logs such as Dockerhub. Railway shut down compromised internal tooling, rolled all keys, moved to a new generation of infrastructure, rebuilt its infrastructure tooling, and added functionality to mass revoke app permissions.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html","publishedAt":"2026-11-12T02:53:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain","data_extraction"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["Railway","OpenAI","Anthropic","OpenRouter","GitHub","GitLab","Stripe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-12T02:53:41.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"]}}