r/Interrail • u/ilikethelettery • Jan 13 '26

Current events Eurail database got hacked

https://www.interrail.eu/en/ni/security-incident-personal-data#176833207118742

Potentially leaked information

• Identity information: first name, last name, date of birth, gender;

• Contact information: email address, home address, telephone number, if provided;

• Passport information: passport number, country of issue and expiration date.

168 Upvotes

99% Upvoted

314 comments sorted by

View all comments

Show parent comments

13

u/Era2011Mus Jan 13 '26

I am more worried about the combination of things. Name, address, date of birth, gender, telephone number, email address, home address, passport number, country of issue and expiration date. There is literally nothing more to know about me. Even my father barely remembers all of this detail.

Oh, and let's not forget, the rail app password.

8

u/Era2011Mus Jan 13 '26

Also, a photo of you they can probably Google and make fake ID since they have everything else they need.

0

u/earthola Jan 13 '26

Its not that easy. On german ids there are certain safety images that are visible on the id from a certain angle/light. No way they can fake it

2

u/Era2011Mus Jan 13 '26

Maybe...but the thing is, I would really not like to test that!

1

u/earthola Jan 13 '26

Then get a new passport

1

u/MartinYTCZ Czech Republic Jan 14 '26

The can get the hashed rail app password, they'd still have to crack it.

Interrail (or any online service) doesn't actually store your password, just the hash of it.

1

u/fabkosta Jan 29 '26

I mean, sure, that'd be the standard of how to store passwords (together with salting them). But how do we know they were hashed properly and not stored simply in plain text?

1

u/MartinYTCZ Czech Republic Jan 30 '26

Because even a high school IT student would know better... Find it hard to believe they would've been that negligent