CSX breach exposes personal information of 40,000 employees

CSX, one of the United States’ largest transportation companies, disclosed a cybersecurity incident that granted unauthorised access to certain information, including employee data such as Social Security numbers. The company says the incident occurred between 29 May and 9 June, and that it became aware of the attack during that window. The breach was reported by WTOL, citing the company’s statements.

CSX has begun notifying affected individuals, mailing letters to about 40,000 current and former employees nationwide. WTOL notes that CSX has not yet confirmed how many of those notified reside in Ohio. The report attributes the breach timeline and notification details to CSX’s communications, with the breach described as exposure of employee information rather than broader system compromise.