Data breach
Amtrakamtrak.com
2 147 679 accounts exposed in a breach dated 2026-04-03.
Breached2026-04-03Added to HIBP2026-04-17 UTCUpdated by HIBP2026-04-17 UTCAccounts2 147 679Domainamtrak.com
Verified
What happened in Have I Been Pwned’s words
In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.
Exposed data as HIBP classifies it
- Email addresses
- Names
- Physical addresses
- Support tickets
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC