Eurail Interail systems breached; customer data exposed

A significant data security breach has impacted Eurail's Interrail systems, potentially exposing sensitive personal information of customers across Europe.

A significant data security breach has impacted Eurail's Interrail systems, potentially exposing sensitive personal information of customers across Europe, according to Cybernews.

The incident, which also affects participants in the EU's DiscoverEU travel initiative, involved unauthorized access to a database containing names, email and home addresses, phone numbers, dates of birth, and, in some cases, copies of passports, identity documents, and bank account details.

Eurail stated that upon discovery, it immediately secured its systems and launched an investigation with external cybersecurity specialists and legal advisors.

The exact number of affected individuals remains unclear as the investigation into the scope and impact continues. While there is currently no evidence that the stolen data has been misused or publicly disclosed, the European Commission has confirmed the types of potentially compromised information, which also includes health data. The incident has been reported to data protection authorities within and outside the EU, and affected customers are being notified.

Written by

Sharon Florentine Editorial Director

Sharon Florentine is the editorial director for CyberRisk Alliance’s Channel Brands and acting editorial director for SC UK. She is responsible for setting strategy and editorial direction and developing content for news, features, analysis and other written content, moderates live webcasts, and oversees research projects. Sharon has previously held key editorial, content and leadership positions at DevOps.com, Security Boulevard, CIO.com, Ziff Davis Enterprise, and CRN, among others.