Eurail says December data breach impacts 300,000 individuals

Eurail B.V., a European travel operator managing digital rail passes across 33 countries, disclosed a significant data breach occurring in December 2025. Attackers exfiltrated personal information belonging to over 300,000 individuals. The compromised data poses risks of identity theft, phishing attacks, and social engineering targeting affected customers. As a precautionary measure, Eurail customers should monitor financial statements, be vigilant of unsolicited communications requesting personal information, and consider placing fraud alerts with credit bureaus. The operator should implement enhanced security controls, notify affected individuals per GDPR requirements, and conduct a thorough forensic investigation to determine the attack vector and prevent future incidents.

Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the personal information of over 300,000 individuals in a December 2025 data breach. [...]

Eurail B.V., a European travel operator managing digital rail passes across 33 countries, disclosed a significant data breach occurring in December 2025. Attackers exfiltrated personal information belonging to over 300,000 individuals. The compromised data poses risks of identity theft, phishing attacks, and social engineering targeting affected customers. As a precautionary measure, Eurail customers should monitor financial statements, be vigilant of unsolicited communications requesting personal information, and consider placing fraud alerts with credit bureaus. The operator should implement enhanced security controls, notify affected individuals per GDPR requirements, and conduct a thorough forensic investigation to determine the attack vector and prevent future incidents. Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the personal information of over 300,000 individuals in a December 2025 data breach. [...] Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the personal information of over 300,000 individuals in a December 2025 data breach. [...]