Railway breach leads to $740,000 in fraudulent AI charges
Update, 10 November 2026: The ~100,000 figure is an upper bound, not a confirmed count.
What it is: In October 2026, attackers partially escaped Railway’s build-system filesystem isolation, then abused a misconfigured OIDC trust relationship. Railway says up to 1.85% of workspaces (~100,000) could have had variables decrypted; this is an upper bound, not a confirmed impact count. Some stolen credentials drove an estimated $740,000 in unauthorized AI charges. Railway will cover charges providers decline to refund and reset linked-account tokens for 1,852 users.
Assumption: Saved for later reference on cloud-hosting supply-chain and credential risks.
Keywords: Railway, breach, AI charges, credentials, OIDC, build isolation