Eurail B.V. data breach

Clerk's notes

On March 27, 2026, Eurail B.V. formally notified the Washington Attorney General's Office about a data security incident. The central organization behind Eurail and Interrail passes, Eurail B.V. facilitates international rail travel and handles extensive customer information.

The nature of the breach was not specified, but the incident is currently under monitoring. Eurail B.V. is obligated under state and federal regulations to protect the sensitive personal data it collects from U.S. residents, including those in Washington State.

Investigations indicate that the exposed data categories include Full Name, Date of Birth, Email Address, Mailing Address, Passport Number, Payment Card Information, Travel Itinerary and Booking History, and Customer Account Credentials. The compromise of such detailed information can lead to severe risks, including financial fraud and identity theft.

Receiving a data breach notification letter from Eurail B.V. confirms that your personal information was compromised. This notification establishes a basis for affected individuals to explore potential legal recourse.

If you received an official notice from Eurail B.V. concerning this incident, you are not required to wait for actual financial loss or identity theft to take action. Our firm is currently evaluating potential claims related to this data breach. Affected individuals can seek a free case review to understand their options and hold Eurail B.V. accountable for any security failures.

If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.