Eurail hack leaves passengers at risk
Thousands of Interrail travellers across Europe are dealing with the fallout from a major data breach after hackers reportedly posted stolen personal information online, prompting some people to cancel and replace their passports.
Eurail, the Dutch company that manages Interrail passes, confirmed that data taken during a cyberattack in December is now being “offered for sale on the dark web,” with a sample dataset shared on Telegram. The breach affects more than 300,000 customers.
The compromised information includes highly sensitive details such as passport numbers, full names, phone numbers, email addresses, home addresses, and dates of birth. The situation has left many travellers anxious about identity theft and potential fraud.
Some affected individuals say they were advised by authorities to cancel their passports as a precaution. In the UK, at least one person was told by the Passport Office to invalidate their passport to prevent misuse, which would require paying £102 for a replacement. Others in Europe report similar experiences, with replacement costs exceeding £200.
Travellers have expressed frustration and confusion about how serious the risk is and whether replacing passports is truly necessary. One customer described the situation as “an absolute nightmare,” worrying about both the financial burden and the possibility of travel disruptions.
Eurail has urged customers to stay alert for suspicious messages or calls, update passwords for their Rail Planner app and other accounts, and monitor financial activity for unusual behavior. The company said it regrets the incident and is working to notify everyone affected.
However, many customers feel this response falls short. Some are questioning how such sensitive data was exposed and who will be responsible if it is used for fraud. Others have begun discussing the possibility of seeking compensation under European data protection laws.
Eurail maintains that it is continuing to contact impacted users and is prioritizing efforts to reduce potential harm, but the incident has already sparked widespread concern among travellers planning upcoming trips.
