Eurail passengers taken for a ride as data breach spills passports, bank details

Eurail (Interrail) has confirmed a data breach affecting an undisclosed number of customers, exposing personal information including names, dates of birth, contact details and passport numbers; DiscoverEU travelers may also have had ID photocopies, bank reference numbers and health data compromised. The company says it has closed the vulnerability, reset credentials, notified the Dutch data protection authority, engaged external cybersecurity specialists, and warned affected customers about potential phishing, spoofing and identity theft.