Models unspecified; abliterated-model assistance suspected by Railway: Railway internal systems and customer secrets
Review CAT-X14 · Catalogue X14
EXCLUDED — rogue initiation not established. Railway describes a malicious actor using models; no evidence of independently initiated agent objectives. Preliminary investigation, not autonomous-rogue attribution. Distinct from the April PocketOS deletion. No verified aggregate dollar loss; Reddit spending claims are not accepted as audited loss.
Reviewed: Not recorded · Rule: external-intrusion-v1
Evidence status
EXCLUDED — rogue initiation not established
Dates and discovery
- Incident date
- 2026-10-20 13:58 UTC to 2026-10-22 03:32 UTC
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- Not recorded
- Discovery channel
- Not recorded
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Railway / Jacob Cooper and Angelo Saraceno — Preliminary Report: Oct 21st Security Incident (Oct 22; updated Oct 26, 2026)Original account · blog.railway.com
- Reddit discovery / discussionReddit discovery / discussion · www.reddit.com
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.