Preliminary report: Oct 21st security incident
Timeline: abnormal latency paged on-call at 13:58 UTC on 20 October; privilege escalation in build infrastructure identified and builds halted; a first remediation was followed at 19:53 by evidence the attacker could escalate further in parallel.
at most 1.85%share of Railway workspaces with environment variables potentially compromised