Traveler Information Stolen in Eurail Data Breach

Traveler information held by Eurail has been exposed in a data breach, with personal, order and reservation details disclosed for customers with Eurail passes and those who booked seats. The incident affected all customers issued a Eurail pass and those who made a seat reservation, including DiscoverEU participants, and Eurail said it is continuing its investigation with the European Commission.

The compromised data reportedly includes basic identity and contact information, as well as passport information, and for DiscoverEU customers the stolen data extends to names, dates of birth, addresses, email addresses, phone numbers, health information and IBANs. The company said there is currently no evidence that the data has been misused or publicly disclosed, and this is being monitored by external cybersecurity specialists.

In line with EU GDPR requirements, Eurail has reported the incident to the data protection authority and says it has secured affected systems, rotated credentials and improved monitoring while working with security experts and authorities. according to the European Commission, the warning to potentially affected individuals includes vigilance against phishing, spoofing and identity theft.