Back Securityaffairs.Co

Eurail data breach impacted 308,777 people

Securityaffairs.Co •Pierluigi Paganini • April 9, 2026

Hackers breached Eurail in Dec 2025, stole names and passport data, and exposed over 300,000 travelers’ personal information. Threat actors breached Eurail in December 2025 and stole names and passport numbers from its network. The company now notifies 308,777 people that attackers exposed their personal data, raising concerns identity theft and misuse of sensitive […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Eurail Data Breach Exposes Personal Information of Over 300,000 U.S. Travelers Eurail B.V. confirmed a data breach that exposed personal information of approximately 308,777 individuals in the U.S., including names and passport numbers. The breach occurred on December 26, 2025, when unauthorized actors accessed Eurail's network and transferred sensitive files. The company detected unusual activity and initiated an investigation, which concluded on February 25, 2026, confirming the exposure of personal data. Notifications to affected individuals began on March 27, 2026. The breach also potentially compromised financial and health-related information, with samples of the stolen data appearing on the dark web. Eurail has advised affected individuals to monitor their accounts and update passwords. The breach has raised significant concerns about identity theft and the security of customer data in global transit systems. 14 sources 71

Extracted Entities

Eurail data breach impacted 308,777 people

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)