Story perspectives
Eurail Breach Exposes 308k Passports, Data Sold on Telegram
4/26/2026
1 of 1
Story summary
- Eurail, a Dutch rail pass provider, suffered a breach that exposed personal details of about 308,777 customers.
- A sample of the stolen database, including passport numbers, appeared on Telegram for sale.
- Eurail began notifying affected individuals on March 27 2026, after the breach, and instructed travelers to cancel their passports at their own cost.
- A hacker claimed to have taken roughly 1.3 terabytes of data from Eurail’s cloud and support systems.
