Names and passport numbers of 308,777 Eurail customers leaked
A breach at Eurail in December 2025 led to the theft of customer names, passport numbers, contact details and more. DiscoverEU participants may also have had copies of identity documents, bank account reference information and health information exposed. Eurail disclosed that 308,777 people were affected, and some of the stolen data was published online or offered for sale.
Key facts
- Affected organisation
- Eurail
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data of 308,777 people
- Cause / method
- Customer data stolen in external breach
- Location
- Other countries
If your data was exposed
Exposed dataNameID document copyBank accountHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Eurail confirmed the theft of customer data, and it was suggested that sensitive information of DiscoverEU participants may also have been exposed.
- Attackers offered the stolen Eurail user data for sale.
- Eurail disclosed that 308,777 people were affected by the December 2025 breach.
6 related reports
- Eurail passengers taken for a ride as data breach spills passports, bank details
- Traveler Information Stolen in Eurail Data Breach
- Sensitive data of Eurail, Interrail travelers compromised in data breach
- Hackers Offer to Sell Millions of Eurail User Records
- Hackers sell stolen Eurail traveler information on dark web
- Eurail says December data breach impacts 300,000 individuals
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.