Eurail User Data Breach: Hackers Offer Millions of Records for Sale
Eurail Data Breach: Customer Data Stolen and Sold on Dark Web
A data breach at Eurail, a European rail pass provider, has resulted in the theft of customer data, which is now being offered for sale on the dark web.
Breach Details
The company disclosed the breach in mid-January, stating that hackers had accessed systems containing personal, order, and travel reservation information.
The hackers claim to have stolen approximately 1.3 TB of data from Amazon Web Services (AWS) S3, Zendesk, and GitLab instances.
The stolen data allegedly includes Eurail source code, support tickets, and database backups.
Compromised Data
The hackers claim that the database backups contain the personal information of millions of Eurail and Interrail customers, including names, dates of birth, phone numbers, addresses, postal addresses, and passport information.
SecurityWeek’s analysis suggests that several of the database files offered for sale contain between 50,000 and 17 million records.
Consequences
The hackers have stated that negotiations with Eurail have failed and that they plan to publicly release all the stolen data if they do not find a buyer.
Eurail is currently investigating the breach and has not disclosed the number of affected customers.
Importance of Cybersecurity
The breach is a significant concern for Eurail customers, as it may put their personal and financial information at risk.
The incident highlights the importance of robust cybersecurity measures to protect sensitive data and prevent unauthorized access.
In recent years, there has been an increase in data breaches and cyberattacks targeting companies in the transportation sector.
This incident serves as a reminder of the need for organizations to prioritize cybersecurity and implement effective measures to prevent and respond to data breaches.
Response and Notification
Eurail has not disclosed the extent of the breach or the number of affected customers.
However, the company has stated that it is working to notify affected customers and provide them with support and guidance.
The incident is a reminder of the importance of robust cybersecurity measures to protect sensitive data and prevent unauthorized access.
Companies must prioritize cybersecurity and implement effective measures to prevent and respond to data breaches.
About Author
English