Railway emailed me in October. Stored credentials exposed. Nothing got used, as far as anyone knows.
I spent one evening rotating everything. Supabase, Neon, DeepSeek, Brave. It was boring and it was scary at the same time.
The part that gets me: I knew better. I just never thought it would happen to me.
Where do your keys live right now? Be honest.