Amtrak

Disclosed Apr 17, 20262,147,679 accountsUnverified

In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak . The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.

What is known

People affected	2,147,679 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Apr 17, 2026
Happened	Apr 3, 2026
Attack	Ransomware
Data exposed	EmailsNamesAddresses
Sector	Tech · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Amtrak

Notices filed

Accounts in the dataApr 17

Have I Been Pwned2,147,679 people

Other breaches at Amtrak

Hacking breachHacking exposed names. Reported to the California AG.13K affectedTechUSMay 28, 2020

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Amtrak