Amtrak Data Breach
What Happened
In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.
Compromised Data
Recommended Actions
Trusted by 1.5 million paying customers. Guardio blocks scam calls, texts, emails and websites, and helps you close security gaps in your accounts, so you can go about your day with more peace of mind.
Try Guardio
Use a password manager to generate and store strong, unique passwords for all your accounts. 1Password helps protect your data with industry-leading security.
Try 1Password
Get Aura for identity theft and credit protection. Keep your assets safe with fast fraud alerts, instant credit lock, and $1,000,000 identity theft insurance. Speak to a U.S. based fraud specialist 24/7.
Try AuraBreach Overview
-
Affected Addresses:
2.1M
-
Breach Occurred:
April 2026
-
Added to HIBP:
17 Apr 2026
Recommended Actions
Change Your Password
If you haven’t already changed the password affected by this breach, do so immediately on every account where it was used.
Enable Two-Factor Authentication
Wherever 2FA is supported, add an extra layer of security to your account.
Use a password manager to generate and store strong, unique passwords for all your accounts. 1Password helps protect your data with industry-leading security.
Try 1Password
Get Aura for identity theft and credit protection. Keep your assets safe with fast fraud alerts, instant credit lock, and $1,000,000 identity theft insurance. Speak to a U.S. based fraud specialist 24/7.
Try Aura
Trusted by 1.5 million paying customers. Guardio blocks scam calls, texts, emails and websites, and helps you close security gaps in your accounts, so you can go about your day with more peace of mind.
Try Guardio