Railway said hackers may have accessed encrypted environment variables and decrypted some customer passwords and API keys. Although its initial analysis points to a subset of users, the platform urged all customers to rotate their keys and paused deployments during its investigation.