Railway, a platform-as-a-service provider, experienced a data breach in October where attackers stole customer AI provider keys stored as environment variables. The attacker accessed approximately 1.85% of workspaces, 100,000 in total, and used the stolen keys to incur an estimated $740,000 in unauthorized spending. Railway has taken steps to mitigate the incident, including resetting linked-account tokens for 1,852 users and notifying them. However, the company will not refund customers for the unauthorized AI spend, instead offering to pay the charges itself. The incident highlights the importance of secure storage and handling of sensitive data, such as API keys and database credentials, in cloud-based platforms.