Over 300K Americans compromised in Eurail breach

Eurail B.V., the company managing European rail passes, has disclosed that 308,777 American individuals had their data stolen following a December cyberattack, which was claimed to have led to the theft of 1.3 TB of data in February, reports The Record, a news site by cybersecurity firm Recorded Future.

Infiltration of Eurail systems on Dec. 26 allowed threat actors to siphon individuals' names and passport numbers, said Eurail in breach notices filed with multiple state regulators.

"We can confirm that data copied during the security incident has been offered for sale on the dark web and a sample dataset has been published on Telegram. Customers whose personal data was included in the sample dataset are being informed directly where contact details are available to us," said a Eurail spokesperson.

Such a disclosure comes after the Eurail breach was reported to have also exposed the DiscoverEU traveling program participants' names, passport details, bank account numbers, and certain health information.