The breach exposed usernames and passwords of an undisclosed number of program members.

Dark Reading Staff, Dark Reading

June 3, 2020

1 Min Read

Amtrak has disclosed a breach in its frequent-passenger program that has exposed personally identifiable information of an undisclosed number of participants. The disclosure of the April 16 breach came as part of a regulatory filing with the Office of the Vermont Attorney General on May 29.

According to the filing, an unauthorized third party was able to gain access to information, including usernames and passwords, on the traveler program's site. Amtrak said that it shut down access within hours of its discovery.

Amtrak changed the passwords of all affected customers and has offered a year of Experian IdentityWorks identity theft monitoring to those individuals.

Read more details here.

VIRTUALSUMMIT_DR20_320x50.jpg

 

 

 

 

 

 

Learn from industry experts in a setting that is conducive to interaction and conversation about how to prepare for that "really  bad day" in cybersecurity. Click for more information and to register

 

 

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights