Skip to content
Data breachResolved

Amtrak data breach (2026)

In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly.

Victim
Amtrak
records
2.1M
SectorMedia

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2026-04-03, Amtrak was affected by a data breach. Approximately 2,147,679 accounts were exposed. In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#Amtrak
  2. amtrak.comhttps://amtrak.com

Related incidents