Eurail says December data breach impacts 300,000 individuals

Eurail B.V. disclosed a data breach stemming from an unauthorized file transfer on December 26, 2025 that exposed the personal information of 308,777 customers — including full names, passport numbers, ID numbers, bank IBANs, health information, and contact details. A sample of the stolen records was posted on Telegram and is being marketed on the dark web; affected users were notified in March 2026 and advised to monitor accounts, update passwords, and watch for phishing and fraud.