Amtrak — data breach (Amtrak)

Domain: amtrak.com · Accounts affected: 2,147,679 · Data exposed: Email addresses, Names, Physical addresses, Support tickets · Verified breach — In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.