Loading page…
Amtrak suffered a data breach in April 2026 affecting over 2.1 million accounts, with the hacking group ShinyHunters claiming responsibility and later publishing the stolen data.
According to Have I Been Pwned, the hacking group ShinyHunters claimed in April 2026 that they had breached Amtrak. The group typically compromises organizations' Salesforce instances before demanding ransom and, if unpaid, publicly releasing the data. ShinyHunters subsequently published the alleged stolen data.
The breach exposed over 2 million unique email addresses along with customer names, physical addresses, and customer support records.
Approximately 2.1 million Amtrak accounts were affected by the breach.
Amtrak customers should monitor their accounts for suspicious activity and consider changing their passwords. Those affected should watch for phishing attempts and unsolicited contact using their exposed personal information.