Eurail says stolen traveler data now up for sale on dark web

Eurail B.V. confirmed a breach of its customer database and reported that stolen records — reportedly including full names, passport and ID details, bank IBANs, health information and contact data — are being offered for sale on the dark web, with a sample published on Telegram. The company is investigating the extent of the exposure, notifying data protection authorities under GDPR, advising affected customers to change passwords and monitor finances, and providing an FAQ and contact email for inquiries.