A major cybersecurity incident has impacted Eurail BV, the company behind Europe’s popular multi-country rail pass service. The breach has compromised the personal data of more than 300,000 travellers, including highly sensitive information such as passport details.
The company revealed that the cyberattack took place in December 2025 but was only detected in January 2026. This delay led to a detailed investigation involving cybersecurity experts and forensic teams to understand how the breach occurred and assess its full impact.
As the probe progressed, it was found that attackers accessed a wide range of personal data. This includes names, email addresses, phone numbers, home addresses, and dates of birth. More sensitive information such as financial details, including IBANs, health-related data, and copies of identification documents were also exposed.
The breach went beyond data theft. According to official disclosures, hackers issued a ransom demand and threatened to release stolen data on the dark web if their demands were not met. The attackers reportedly used platforms like Telegram to promote the stolen data and increase pressure on the company.
Notifications sent to affected users, particularly in regions such as California, Texas, and Oregon, confirmed the scale of the breach. Around 1.3TB of data was exfiltrated. This dataset included not only customer information but also internal company assets such as source code, customer support records, and data backups.
The incident highlights growing cybersecurity risks for global travel platforms that handle large volumes of personal data. It also raises concerns about identity theft and misuse of sensitive information.
The breach underscores the need for stronger security systems and faster threat detection to reduce the impact of such attacks.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.
