TLDR Tech / InfoSec
Eurail data breach impacted 308,777 people
Threat actors breached Eurail B.V. on December 26, 2025, exfiltrating names, passport numbers, dates of birth, IBANs, health data, and travel reservation details belonging to 308,777 customers — including DiscoverEU program participants — with stolen data later surfacing for sale on the dark web and samples shared on Telegram. The two-month gap between breach and victim notification reflects the delayed forensic review timeline, though Eurail confirmed it does not store payment card data or passport scans. Affected customers should rotate the Rail Planner app and linked account passwords, monitor for account anomalies, and alert their bank to potential identity theft risk.
Read the full story