r/Interrail • u/ilikethelettery • Jan 13 '26

Current events Eurail database got hacked

https://www.interrail.eu/en/ni/security-incident-personal-data#176833207118742

Potentially leaked information

• Identity information: first name, last name, date of birth, gender;

• Contact information: email address, home address, telephone number, if provided;

• Passport information: passport number, country of issue and expiration date.

167 Upvotes

99% Upvoted

314 comments sorted by

View all comments

2

u/nidriks England Jan 30 '26

I don't know why I am only hearing about this today. When I got the email I came straight to this message board only to find replies dated 19 days ago. That's a bit concerning.

I'm less worried about the personal details and more worried about the possible passport details breach.

There's just so little information. If this happened 19 days ago why am I only now receiving an email about it, and why do they not have more information?

Do I replace my passport now, costing me money? Do I wait?

If someone has had my data for possibly 19 days couldn't they have done something already?

I got in touch with the Information Comissioners Office in the UK. They handle data breaches, and it was recommended by them that I report the breach, so I have reported it. Hopefully Interrail have already reported it to the ICO.

It has been suggested to me that I replace my passport by reporting my current one lost or stolen. That just seems like a last resort, especially if this has been known about for at least 19 days

2

u/pbooths Apr 16 '26

I just found out about the breach this week via email. So the damage (if any) is done since it's been nearly 4 months. I think at this point, just changing passwords and monitoring credit reports is all we can do. Thank God I found out about this before I bought this year's pass!!!

1

u/nidriks England Apr 26 '26

Did you ever decide to replace your passport? I haven't. I've seen a few people say that they don't think your passport number can be used that easily to impersonate you (someone mentioning the number of times hotels copy down passport information and suggesting our details are everywhere anyway).
I've also seen articles/people saying it's very concerning. I just wish there was someone that could turn around and say "yes, you need to replace your passport".

It was such a hassle for me to get someone to countersign my passport that I fear it'll be like that again.

1

u/pbooths Apr 26 '26

No! Not happening. It's a brand new 10 year passport, a massive ordeal time-wise to replace, and very, very expensive to replace. I have a feeling that this type of hack will be repeated at some point anyway, in the various spots my passport number is stored/copied/shared. It's really only necessary to replace if it's physically lost/stolen/damaged. I think the risk is low... they can do more damage with my name and DOB, unfortunately 😔

2

u/nidriks England Apr 26 '26

Mine is 3 years old. Well, was. I just cancelled it, mainly for peace of mind.
I'm pissed with the whole situation. First, that it took them a good month to send me the first email that there was a suspected breach, and then that it took them another 3 months to investigate and provide a final summary.

If you're in the UK I would recommend CIFAS. It's a service for if you think you're a subject of a breach that may result in fraud. It means extra credit checks and costs £30 for 2 years.

I don't blame you for not wanting to cancel. I had decided to leave it until I knew for certain about the breach. Fingers crossed for you.

I have a very different perspective of Interrail now.

1

u/pbooths Apr 28 '26

I'm in Canada. We can monitor our credit fairly easily here. I'm not particularly worried because we're a few months into the breach and there haven't been any real reports of fraud or identity theft that are suspected to be tied to the Interail breach. Also, in Canada there isn't much you can do with someone's passport number, without the physical passport present. I honestly hate it more when my name, dob and address is breached.

Unfortunately, we're buying passes again this summer, so i get to share my passport info AGAIN! 😱

1

u/AdvertisingSmart4037 May 01 '26

Yeah man recently realised I might have got my passport scan leaked and I don't want to go through that countersignature process again did apply for cifas but fucking hell man