Hackers threaten to leak over 9M Amtrak records, including personal info

https://cybernews.com/security/hackers-threaten-amtrak-data-leak/

CyberNews published this on 14 April 2026. haveibeenpwned logged this on 17 April 2026.

Amtrak is a train service in the United States. Amtrak is basically a government entity (not a joke, it has it’s own police force and if I’m not mistaken can regulate other train services in the country). It operates in 46 US states and has over 20k employees servicing over 34M customers.

From what I know, it’s primarily used for traveling between states with a route going from the top most of the US (Maine) to the bottom (Florida). I know several people that rely on Amtrak to get to work (to anyone that doesn’t know how big the US really is, many people use a train to go from state to state to get to work everyday sometimes commuting close to 2 hours there and back).

So far no one I know has received communication on the breach from Amtrak. They are obviously very concerned. Until more info comes out from Amtrak on what and who exactly has been breached there really isn’t any advice I can offer them.

If anyone has any advice please share and spread the word to anyone you know in the US.