Not even that one. One day I got calls from customers saying: "why can I see other people's accounts?". Then saw that Railway had started caching arbitrary responses. Like how do you even do that without trying?
IMO Railway's response was evasive, underplayed the incident, and did not reflect the severity of this failure. As a response we pulled all our big projects off Railway.
All I want is that my data is reliably secure on some iron somewhere, without a million vibe coding features or whatever they are trying to build, distracting from basic security.
Anything hosted on Railway is at a huge risk, IMO.
IMO Railway's response was evasive, underplayed the incident, and did not reflect the severity of this failure. As a response we pulled all our big projects off Railway.
All I want is that my data is reliably secure on some iron somewhere, without a million vibe coding features or whatever they are trying to build, distracting from basic security.
Anything hosted on Railway is at a huge risk, IMO.
https://blog.railway.com/p/incident-report-march-30-2026-acc...