Hackers breached cloud host Railway using automated AI agents, potentially exposing secrets across 100,000 workspaces. The attackers ran up roughly $740,000 in fraudulent AI charges before engineers expelled them.