Passport numbers for more than 300,000 leaked during December Eurail data breach

Eurail B.V. disclosed a December 26 security incident that exposed personal and operational data for an estimated 308,777 people; attackers claim to have stolen ~1.3 TB including source code, database backups and support tickets, have offered the data for sale on the dark web and published a sample on Telegram, and downstream programs such as DiscoverEU reported sensitive passenger data (names, passport details, bank and health information) were likely impacted.