Welcome to HowToShipIt — practical how-to guides for developers: code, AI tools, and servers, explained step by step.

The Railway Breach: Your Rotation Runbook for the Env-Var Incident (2026)

Railway security breach: rotation runbook illustration of a server rotating secrets

On the morning of Wednesday, 21 October 2026, the Railway security breach turned thousands of developers’ calm workdays upside down. Railway detected anomalous activity in the systems that store customer environment variables, and its investigation indicates an unauthorised party may have accessed those encrypted variables — and, for some of them, obtained the decrypted contents. … Read more