"aviate, navigate, then communicate" only matters if you are the one in control of outcomes.

Customers could have simply revoked keys and not re-launched services with rolled credentials (that from your post, may have been re-stolen), but instead you let this fester.

What a disaster for Railway. I hope you get through this stressful moment, but this should be the end of Railway.