I have very fond memories of using a Eurail pass back in the day while backpacking through Europe as a student. I was saddened to see that Eurail was the victim of a data breach in December 2025 when attackers obtained access to travelers’ full names and contact information, including email addresses, passport details, ID numbers, bank account and health information, and published it on the dark web for sale.

The incident affected 308,777 travelers. In its notification to affected individuals, Eurail provides information on fraud alerts, credit or security freezes and urges those affected to stay “alert to suspicious messages or activity,” and obtain a free copy of your credit report.

Whether you receive a notification letter or not, it is always a good idea to check your credit report frequently.