Présentation
The European Commission said DiscoverEU participants may have additional data involved. Reports say Eurail confirmed in February 2026 that some data was offered for sale. The first-disclosure date is the January 10, 2026 company statement (earliest public statement confirmed via reporting). No total is given.
Chronologie
- Survenue
- Découverte
- Divulgation
Réponse de l’organisation
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
Que faire ?
Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.
Sources
- California AG data breach report: Eurail B.V.California Department of Justice, Office of the Attorney General · 2026-11-09
- Vermont AG: Eurail B.V. notice to consumersVermont Office of the Attorney General · 2026-11-09
- European Youth Portal: Data security incident affecting DiscoverEU travellersEuropean Commission · 2026-11-09
- Sample consumer notice filed with California AG (Eurail B.V.)California Department of Justice, Office of the Attorney General · 2026-11-09
- Help Net Security: Eurail/Interrail data breach (Jan 15, 2026)Help Net Security · 2026-11-09