Eurail has confirmed customer information was stolen in a data breach, according to notification emails sent out this week. The European travel company, also known as Interrail to EU residents, initially posted the news on January 10, but affected customers, the number of whom was not disclosed, began receiving emails on January 13.
Passports, bank details compromised in Eurail data breach
https://www.theregister.com/2026/01/14/eurail_breach/