Platform-as-a-Service (PaaS) provider Railway disclosed ‘anomalous activity’ on systems storing customer environment variables, indicating a potential breach. An unauthorized third party may have accessed encrypted environment variables, and in some cases, obtained their decrypted contents. The incident is limited to a subset of users, but Railway has urged all developers to rotate their secrets, including API keys and database passwords, to mitigate potential impact.