Eurail Data Breach Affects Over 300,000 U.S. Individuals

Eurail, the European rail pass provider, has disclosed a data breach impacting more than 300,000 individuals in the United States. The company filed required notifications with state attorneys general and the California Attorney General's office. The breach exposed personal information of customers who purchased rail passes through Eurail's booking platform. The company stated that compromised data varies by individual but may include names, email addresses, phone numbers, and payment card information. Eurail operates the popular Eurail Pass and Interrail Pass programs, which allow unlimited train travel across participating European rail networks for set time periods. The passes are widely used by international tourists, including large numbers of American travelers. The incident adds to a growing list of travel industry data breaches affecting consumer payment information. Rail and aviation booking systems remain attractive targets for cybercriminals due to the volume of payment data and personal information processed through these platforms. Eurail has begun notifying affected customers and is offering credit monitoring services to those whose financial information was exposed. The company has not disclosed when the breach occurred or how attackers gained access to its systems.