Eurail says December breach exposed data of 308,777 people
Summary
Eurail reported that hackers copied data affecting 308,777 people, including names and passport numbers. A hacker separately claimed 1.3 TB of files were taken; DiscoverEU said participants’ additional personal data was likely exposed.
Key points
- Eurail said hackers copied data from its systems on December 26, affecting 308,777 people.
- Eurail confirmed that copied data was offered for sale on the dark web and a sample was published on Telegram.
- Breach notices said names and passport numbers were stolen.
- A hacker separately claimed to have taken 1.3 TB of files, including source code, database backups and Zendesk support tickets.
- DiscoverEU warned that participants’ passport copies, addresses, bank account numbers and some health data were likely included.
- Eurail reported the incident to data protection authorities and urged customers to change Rail Planner passwords.
Article Details
- Victim Organization
- Eurail B.V.
- Incident Type
- Data breach involving unauthorized access and copying of data
- Data Types Exposed
- Names
- Passport numbers
- Passport copies
- Addresses
- Bank account numbers
- Some health data
- Source code
- Database backups
- Zendesk support tickets
- Affected Records
- 308,777 people, according to Eurail's breach notices
- Affected Data Size
- A hacker claimed to have stolen 1.3 TB of files; this amount was not confirmed by Eurail.
- Operational Impact
- The breach had downstream effects on DiscoverEU. Eurail urged customers to change passwords associated with its Rail Planner app and said affected customers were being informed where contact details were available.
- Ransom Or Extortion
- Eurail confirmed that copied data was offered for sale on the dark web. A hacker claimed Eurail declined to negotiate and said this prompted them to publicize the theft. Eurail did not disclose whether the data was offered for ransom.
- Claim Status
- confirmed
Products
Rail PlannerEurail notified regulators, urged customers to change Rail Planner passwords, and is informing affected people when contact details are available.Zendesknumbers, and a hacker later claimed 1.3 TB of files — including source code, database backups and Zendesk support tickets — with downstream effects on the DiscoverEU program.