App hoster Railway attackers ran up US$740,000 on stolen AI keys

What happened

Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces. Key points Attackers who breached Railway last month racked up an estimated US$740,000 in unauthorised usage on stolen AI provider keys.

Railway's incident report said the intruder obtained and decrypted stored environment variables for at most 1.85 per5cent of workspaces, or about 100,000 of them. Amazon Web Services and Google have begun refunds under their fraud policies, while OpenAI and SpaceXSI are reviewing claims case by case, Railway said.

Home News Technology Security By Juha Saarinen Nov 11 2026 1:31PM AI model gateway OpenRouter declines refunds. The intruder decrypted stored environment variables for up to 1.85 per cent of workspaces, around 100,000, plus took linked-account tokens for 1852 users.

Railway said it would cover losses that providers such as OpenRouter do not refund, as AWS and Google process claims. Attackers who broke into application hosting platform Railway last month ran up an estimated US$740,000 ($1.07 million) in unauthorised usage on artificial intelligence provider keys stolen from its customers, the company said in an incident post-mortem.

The haul also included linked-account tokens, among them GitHub OAuth tokens, for 1852 users. Database logs showed the attacker ran queries that picked out variables whose names matched AI provider keys, and favoured customers with large numbers of stored variables, Railway said.

Who will pay for the misused keys depends on the provider. Meanwhile, OpenRouter is enforcing the no-refund policy in its terms of service, and Anthropic was still in discussions when the report was published.