Cyberattack at Eurail

June 30, 2026

INCIDENT

Eurail B.V., the Utrecht, Netherlands-based company that manages and markets the Eurail and Interrail passes, suffered a cyberattack in December where personally identifiable information ended up stolen in the hack.
“We recently identified unusual activity within a segment of our network,” the company said in a letter to victims. “We immediately implemented our incident response procedures, took steps to terminate the activity, and commenced an investigation with the support of third-party cybersecurity professionals.”
Eurail said it also notified law enforcement and are supporting its investigation.

Incident Date

December 26, 2025

Location

Netherlands

Estimated Cost

Unknown at this time

Victims

Type of Malware

No Malware identified

Threat Source

No threat source identified