Eurail
Disclosed Feb 16, 20267 months ago308,777 affectedConfirmed
Eurail breach exposes passport, IBAN and health data of 308,777 travelers
Eurail B.V., operator of Eurail and Interrail passes, said an unauthorized actor transferred files from its network on December 26, 2025, and that the data was later offered for sale with a sample on Telegram. Filings put the number of affected people at 308,777, including DiscoverEU participants.
What is known
| People affected | 308,777 (as reported by the organization) |
|---|---|
| Disclosed | Feb 16, 2026 |
| Discovered | Dec 26, 2025 |
| Attack | Hacking |
| Data exposed | Names, Emails, Phone numbers, Government IDs, Financial, Health |
| Sector | Transport · NL |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California AG breach notice: Eurailoag.ca.gov · Regulator | Regulator |
| Eurail says December data breach impacts 300,000 individualsbleepingcomputer.com · News | News |
| Eurail data security incidenteurail.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Feb 16 | 308,777 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.