Cloud hosting firm Railway says recent breach leads to $740,000 in fraudulent AI charges
A zero-day in a cloud provider's infrastructure granted attackers access to paid AI models
by https://www.techradar.com/author/sead-fadilpai · TechRadarNews By Sead Fadilpašić Published 11 November 2026
Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter
- Attackers exploited a zero-day in Railway’s build infrastructure to steal customer AI API keys and cloud credentials
- Stolen keys fueled roughly $740,000 in unauthorized AI usage, likely supporting large-scale model training and automation
- Railway spent 26 hours battling AI-assisted attackers before containing the intrusion and rotating credentials
US-based cloud hosting company Railway said threat actors abused a previously unknown vulnerability to break in, steal user credentials, and rake up hundreds of thousands of dollars in unauthorized AI usage.
The company managed to throw out the criminals and harden its infrastructure, but not before witnessing an epic 26-hour bot-versus-bot battle.
Railway gets attacked
At its core, Railway is a cloud hosting company, but one designed primarily for developers to build, deploy, and run applications without having to manage much of the underlying infrastructure.
Latest Videos FromTechRadarWatch full video here:
Its key services include running websites and APIs, hosting databases and deploying PostgreSQL and MySQL, connecting GitHub repositories and deploying new code automatically, and handling containers, networking and resource allocation.
Similar to other cloud providers, its build infrastructure uses a multi-tenant architecture, meaning a single device hosts multiple builds which should, in theory, be in full isolation from each other on the same virtual machine.
Many of its customers are developers and businesses using AI services, with API keys stored as environment variables on the platform. This allows the hosted applications to communicate with AI models more easily.
Now, in an incident report, Railway said unidentified threat actors used a zero-day vulnerability in its build infrastructure to “partially escape filesystem isolation” and read some of the files stored on the host virtual machines. In these files were apparently credentials the build servers use to authenticate to a subset of internal systems.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsors