Developer Ties $370,000 Theft to Railway Secrets Exposure

The tiered remediation is the real story here: security response has become a paid privilege, with Enterprise customers restored first while everyone else waits on replacement credentials. That split matters for any team running production infrastructure on Railway, and it raises a broader question about whether incident response speed should track contract value. The $370,000 figure also hints that build-time secrets are a live attack surface, not a theoretical one. Worth watching: whether Railway extends the same remediation to lower tiers, and whether build-secret exposure prompts wider scrutiny of CI/CD credential handling across the sector.