xxx
Eurail wanted people’s passport number to let them ride a train. Now that data is for sale on the dark web, and some of the 308,777 people caught up in the breach are being told to cancel their passports and pay for replacements out of their own pocket.
The Dutch company, which sells the Interrail passes used by young travelers across 33 European countries, confirmed this week that a sample of the stolen dataset has already surfaced on Telegram.
“We can confirm that data copied during the security incident has been offered for sale on the dark web and a sample dataset has been published on Telegram,” a spokesperson said. “Customers whose personal data was included in the sample dataset are being informed directly where contact details are available to us.”
The full haul contains exactly the material identity thieves dream about, including passport numbers, passport expiry dates, full names, home addresses, email addresses, phone numbers, and dates of birth. For users of the EU’s DiscoverEU program, which hands out free travel passes to young people, the exposed records also include photocopies of passports, bank account details, and some health data.
From: The Eurail Breach and the Digital ID Problem.
xxx