Railway Breach Leads to $740,000 in Fraudulent AI Charges

Railway breach leads to $740,000 in fraudulent AI charges

Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces. [...]

Railway Cloud Breach Exposes Nearly 100,000 Customer Workspaces, As Hackers Steal AI Credentials And Run Up $740,000 In Unauthorised Bills

Cloud hosting provider Railway has disclosed a major cybersecurity breach in which hackers stole authentication credentials and generated approximately $740,000 in unauthorised artificial intelligence (AI) usage charges. The attack potentially exposed sensitive credentials associated with nearly 100,000 customer workspaces, raising concerns about the security of infrastructure used to develop and deploy AI applications. The attackers …

Railway Reveals How Hackers Used AI Agents to Steal API Keys and Rack Up $740,000 in Charges

Railway has revealed how an attacker used AI agents, a build system flaw, and cloud access mistakes to steal customer secrets and generate an estimated $740,000 in unauthorized charges. Its November 10 report describes an attack that crossed several internal systems while engineers worked to close multiple entry points. The findings expand on the earlier […]