Data breach
Amtrak data breach
In 2026, Amtrak suffered a data breach affecting 3,119,156 records. Exposed data included names, surname, email addresses and 3 other types of data.
Breach date
3.1 million
Records in the breach
6
Types of data exposed
Were you affected by the Amtrak breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Amtrak breach
- Names
- Surname
- Email Addresses
- Addresses
- Travel Records
- Support Tickets
About the breach
An Amtrak Data Breach occurred in April 2026, linked to the hacking group ShinyHunters.
Key Details of the Breach
• Date Discovered & Reported: Discovered around April 3–17, 2026, and publicly reported by late April 2026.
• Affected Accounts: Over 2.1 million unique accounts were exposed, with estimates suggesting up to 9.4 million records could be impacted.
• Attack Vector: Compromise of cloud-based customer management / CRM systems (such as Salesforce instances).
• Exposed Data: Names, email addresses, physical addresses, and customer support/travel records. Financial data, credit card numbers, and Social Security numbers were not part of this exposure.
• Associated Risks: Phishing and social engineering attacks, where bad actors use real travel history and support details to impersonate Amtrak or travel partners. Secondary extortion scams (such as false sextortion/device-hacking emails using leaked addresses) have also been reported by users on platforms like Reddit.
Key Details of the Breach
• Date Discovered & Reported: Discovered around April 3–17, 2026, and publicly reported by late April 2026.
• Affected Accounts: Over 2.1 million unique accounts were exposed, with estimates suggesting up to 9.4 million records could be impacted.
• Attack Vector: Compromise of cloud-based customer management / CRM systems (such as Salesforce instances).
• Exposed Data: Names, email addresses, physical addresses, and customer support/travel records. Financial data, credit card numbers, and Social Security numbers were not part of this exposure.
• Associated Risks: Phishing and social engineering attacks, where bad actors use real travel history and support details to impersonate Amtrak or travel partners. Secondary extortion scams (such as false sextortion/device-hacking emails using leaked addresses) have also been reported by users on platforms like Reddit.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent emails.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent emails.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.