- More than 300,000 Interrail passengers have had personal data, including passport numbers, contact details, bank account references, and health information, accessed in a security breach of Eurail BV's systems.
- The compromised data, which also affects participants in the EU's DiscoverEU programme, has been leaked and offered for sale on the dark web, with a sample dataset published on Telegram.
- Eurail has concluded its investigation and is notifying affected customers, clarifying that it does not store bank or credit card details, nor visual copies of passports.
- The Home Office said that it is up to individual passport holders to decide whether to replace their passports if details are compromised, highlighting the security features of British passports.
- Eurail and DiscoverEU advise customers to remain vigilant for suspicious communications, update passwords for related accounts, and monitor bank accounts, as some affected individuals seek compensation for new passports.
IN FULL
Interrail customer data put up for sale on the dark web in major security breach
