# Clarification: Recent Oct 24 API key revocations are precautionary

- Provider: [Railway](https://down.guide/railway)
- Level: confirmed
- Impact: Degraded
- lasted 16h 30m
- started 2026-10-24 13:57 UTC
- Support & Community - station.railway.com
- id: DWN-4db16bb628
- Official page: https://status.railway.com/incident/8E4V5WLD

## Updates from Railway
### 2026-10-24 13:57 UTC: triage
Railway is not currently under attack.
Recent API key revocations by AI providers are precautionary actions in response to the October 21 incident, not a new security incident. 
On October 23, after the attacker’s access had been fully removed on October 22 at 03:32 UTC, AI providers requested another batch of potentially affected keys. We provided that batch to OpenAI and Anthropic, but because we could not filter keys by when they were added, it inadvertently included newer keys. As a result, providers may have revoked replacement keys you created after the incident. These revocations do not indicate that your replacement keys were compromised. 
You should also receive communications directly from the providers taking action, explaining their response and any steps you need to take.
If a provider revoked your key, create a replacement, update the corresponding Railway environment variable, and redeploy the services that use it. If your keys are still working, this notice does not require you to repeat completed rotations. We’re sorry for the confusion and additional disruption.

### 2026-10-25 06:26 UTC: resolved
Dismissed as a notice. No impact.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).