Interrail identified unusual activity within a segment of its network, leading to the discovery of a security incident. We immediately implemented our incident response procedures, took measures to terminate the activity, and commenced an investigation with the support of third-party cybersecurity professionals.
The investigation showed that an unauthorized actor transferred files from our network. We reviewed the files involved and determined that they contained certain customers’ information. We also notified law enforcement and have supported its investigation.
Note: On 9 September, Eurail became part of the Interrail brand. You will now see “Interrail” instead of “Eurail” across our products and channels.