This is so fucked up. I was reviewing my account and I just saw this in the logs... Claude says database credentials and bucket credentials go in via env vars so likely they had access to database and bucket contents.

  Audit Logs
  Oct 21, 2026 05:54:13 PM CDT
  BucketInstanceCredential.regenerated in my-project production by Railway Staff
  Oct 21, 2026 05:54:13 PM CDT
  BucketInstanceCredential.regenerated in my-project production by Railway Staff
  Oct 21, 2026 05:54:13 PM CDT
  BucketInstanceCredential.regenerated in my-project production by Railway Staff