
Incident Report: March 30th, 2026 — Authenticated user data cached
Railway disclosed a critical security incident on March 30, 2026, where a misconfiguration accidentally enabled CDN caching for ~0.05% of domains that had it disabled. This caused potentially authenti…





