---
title: "[LINK] Railway breach leads to $740,000 in fraudulent AI charges"
pubDatetime: 2026-11-10T22:30:00.000Z
description: "Railway says up to about 100,000 workspaces could have been affected; stolen keys led to an estimated $740,000 in unauthorized AI charges."
tags: [ai-security, incident-response, supply-chain, credentials, 2026, 2026-q4, 2026-11, LINK]
---
[Railway breach leads to $740,000 in fraudulent AI charges](https://www.bleepingcomputer.com/news/apple/railway-breach-leads-to-740-000-in-fraudulent-ai-charges/)

*Update, 10 November 2026: The ~100,000 figure is an upper bound, not a confirmed count.*

**What it is:** In October 2026, attackers partially escaped Railway's build-system filesystem isolation, then abused a misconfigured OIDC trust relationship. Railway says up to 1.85% of workspaces (~100,000) could have had variables decrypted; this is an upper bound, not a confirmed impact count. Some stolen credentials drove an estimated $740,000 in unauthorized AI charges. Railway will cover charges providers decline to refund and reset linked-account tokens for 1,852 users.

*Assumption:* Saved for later reference on cloud-hosting supply-chain and credential risks.

**Keywords:** Railway, breach, AI charges, credentials, OIDC, build isolation