We have published guides to help users through recommended next steps regarding the security notice. These guides may require redeployment of services which you will not be able to complete until Builds are available again. However, there are steps you may begin to take. We will update as soon as Builds are available. This page remains the fastest place for updates.

Published Guides:
- Check for Unexpected OpenRouter Usage: https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-openrouter-usage
- Rotate PostgreSQL Database Credentials: https://blog.railway.com/p/security-disclosure-recommendation-rotate-postgresql-database-credentials
- Check for Unexpected Grok Usage: https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-grok-usage
- Redeploy Buckets and Reconnect GitHub After the Credential Reset: https://blog.railway.com/p/security-disclosure-recommendation-redeploy-buckets-and-reconnect-github-after-the-credential-reset
- Check for Unexpected Anthropic Usage: https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-anthropic-usage
- Check for Unexpected OpenAI Usage: https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-openai-usage
- Check for Unexpected Usage in Stripe: https://blog.railway.com/p/security-disclosure-recommendation-check-for-unexpected-usage-in-stripe
- Check for Anomalous GitHub Access: https://blog.railway.com/p/security-disclosure-recommendation-check-for-anomalous-github-access
- Rotate MongoDB Database Credentials: https://blog.railway.com/p/security-disclosure-recommendation-rotate-mongodb-database-credentials
- Rotate Redis Database Credentials: https://blog.railway.com/p/security-disclosure-recommendation-rotate-redis-database-credentials
- Rotate MySQL Database Credentials: https://blog.railway.com/p/security-disclosure-recommendation-rotate-mysql-database-credentials
- Check for Anomalous AWS Access: https://blog.railway.com/p/security-disclosure-recommendation-check-for-anomalous-aws-access
- Check for Anomalous GCP Access: https://blog.railway.com/p/security-disclosure-recommendation-check-for-anomalous-gcp-access

We are continuing to work to make builds available again. We will be publishing guides shortly to help users through recommended next steps regarding the security notice. This page remains the fastest place for updates.

Please note that customers may see revocation of storage bucket credentials performed by Railway employee "Faraz Patankar" in their audit logs or activity panel. This is expected, as we previously indicated, we are revoking all existing storage bucket credentials out of an abundance of caution.

We are continuing to rotate bucket credentials and are working to make builds available again as soon as possible. We do not have further details to share right now, and this page remains the fastest place for updates as we learn more.

If you need to reach us, you can email [email protected]. Please note that we may not be able to share more detail than is published here.

Builds remain paused. We will post here as soon as they resume.

We are rotating all Railway bucket credentials in response to the security incident. New credentials will appear in your dashboard automatically.

Because deployments are paused, you will not be able to redeploy your services to pick up the new credentials until builds are restored. We will post here when builds resume with any additional details.

We have published a security notice covering what we know so far and the actions we recommend you take: https://blog.railway.com/p/security-disclosure-wednesday-october-21st

We strongly recommend that you revoke all environment variables stored in Railway, including API keys and private registry credentials, and review your service logs for unusual activity.

Deployments remain paused while we investigate, including for Enterprise customers. We understand you are unable to update your applications with new credentials at this time and sincerely apologize for the inconvenience. We will post here when builds are restored.

As we confirm which accounts were affected, we will contact those customers directly by email.

We do not yet have additional information to provide about the availability of builds. We apologize for the inconvenience and we will provide an update as soon as we can.

We are validating builds for Enterprise workspaces and should be re-enabling for Enterprises broadly very soon. Pro, Hobby, then Free and Trial will follow in stages, and we will post here as each is enabled.

Some users will be signed out and will need to log in again.

We will continue posting updates at least every 30 minutes, and sooner if we have more information. The next update will by 21:00 UTC.

We are continuing to work towards enabling builds for Enterprise workspaces.

We will continue posting updates at least every 30 minutes, and sooner if we have more information. The next update will be at 21:00 UTC latest.

We are continuing to work on a fix for build issues. Due to impact from adjacent cache systems, we are invalidating OAuth sessions as part of our mitigation. Affected users will be signed out and will need to log in again.

We continue to expect builds for Enterprise workspaces to be available by 20:30 UTC. It is possible that this could be delayed by up to 30 minutes, but we will provide an update at 20:30 UTC regardless. Pro, Hobby, then Free and Trial will follow in stages, and we will post here as each is enabled.

Our API, dashboard and station.railway.com remain affected.

We will continue posting updates at least every 30 minutes, and sooner if we have more information. The next update will be at 20:30 UTC.

We have mitigated some issues impacting builds and are continuing to work on bringing builds back online.

We continue to expect builds for Enterprise workspaces to be available by 20:30 UTC. Pro, Hobby, then Free and Trial will follow in stages, and we will post here as each is enabled.

Our API, dashboard and station.railway.com remain affected.

We will continue posting updates at least every 30 minutes, and sooner if we have more information. The next update will be at 20:25 UTC

Earlier today an issue affecting multiple systems led us to pause builds across the platform. We are now working to bring builds back.

We expect builds for Enterprise workspaces to be available by 20:30 UTC. Pro, Hobby, then Free and Trial will follow in stages, and we will post here as each is enabled.

Our API, dashboard and station.railway.com remain affected.

We will continue posting updates at least every 30 minutes, and sooner if anything changes. The next update will be at 20:00 UTC.

Builds and deployments remain paused, and our API, dashboard and station.railway.com are still affected.

When we re-enable builds, we will do it in stages to keep the platform stable as capacity comes back: Enterprise workspaces first, followed by Pro, then Hobby, then Free and Trial. We will post here as each stage is enabled.

We will continue posting updates at least every 30 minutes, and sooner if anything changes. The next update will be at 19:45 UTC.

Work on the issues affecting our API, dashboard, and the build and deployment pipeline is ongoing. Builds and deployments remain paused, and station.railway.com is still unavailable. We do not have new information to share at this time.

We will continue posting updates at least every 30 minutes, and sooner if anything changes. The next update will be at 19:15 UTC.

Builds and deployments remain paused, and our API, dashboard and station.railway.com are still affected. We do not have new information to share at this time.

We will continue posting updates at least every 30 minutes, and sooner if anything changes. The next update will be at 18:45 UTC.

There is no change to report. Our API, dashboard, and the build and deployment pipeline remain affected, builds and deployments are still paused, and station.railway.com remains unavailable.

We will continue posting updates at least every 30 minutes, and sooner if anything changes. The next update will be at 18:15 UTC.

We are still working to resolve the issues affecting our API, dashboard, and the build and deployment pipeline. Builds and deployments remain paused, and our support site (station.railway.com) is unavailable.

We do not have further detail to share yet. We will post updates at least every 30 minutes, and sooner if we have more information. The next update will be at 17:45 UTC.

We are still working to resolve the issues affecting our API, dashboard, and the build and deployment pipeline. Builds and deployments remain paused, and our support site (station.railway.com) is also unavailable, so new support requests cannot be submitted there at this time.

There is no change since our last update. Builds remain paused and some API features are still unavailable. Our support platform is still down as well. We are continuing to work on a fix and will post updates here.

Builds remain paused. Our API is back up, but some features remain unavailable.

We are working on restoring access to our support platform and will continue providing updates here.

We have identified the issue and are working on a fix. While we do, the Railway dashboard, API and CLI are unavailable, and new builds remain paused in all regions. Our support site is also affected, so replies to support requests will be delayed.

We are seeing issues on Railways backend as well. We are still investigating this issue.

We are currently investigating this issue