Breaches and incidentsBriefReported by a reputable outlet, citing the company
Amtrak: 2.1 million customer records published, ShinyHunters claims Salesforce theft
HIBP (added 17 Apr 2026): 2.1M affected email addresses with names, physical addresses and support tickets.
- Disclosed
What happened
- HIBP (added 17 Apr 2026): 2.1M affected email addresses with names, physical addresses and support tickets. ShinyHunters claims 9.4 million records. Amtrak had not publicly confirmed the breach in coverage reviewed.
- Root cause: not disclosed by Amtrak; ShinyHunters says the data came from Amtrak’s Salesforce instance, and reports say it involved a social engineering call to an employee (unconfirmed).
- ShinyHunters claimed it.
- No public Amtrak statement found.
Sources
- https://haveibeenpwned.com/Breach/Amtrak
- https://techrepublic.com/article/news-amtrak-data-breach-2-1m-records
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.