Hackers Derail Amtrak Guest Rewards Accounts in Breach

Amtrak disclosed that between May 15–18 an unknown actor accessed Amtrak Guest Rewards accounts—likely leveraging reused credentials from prior breaches—exposing personal and payment-related information (names, contact details, account numbers, DOBs, partial card data, gift card numbers/PINs and transaction history) and in some cases taking over accounts; Amtrak restored affected account settings and urged password changes and MFA. The notice emphasizes no direct hack of Amtrak systems was found and references prior similar incidents.