Amtrak Data Breach Exposes Millions of Customer Records, Raising Privacy Concerns
A significant data breach involving Amtrak has surfaced, potentially affecting millions of customer accounts. The breach was reported on Have I Been Pwned, a site that tracks data breaches, indicating that customer information may be circulating online. The exposed data includes email addresses, names, physical addresses, and customer support records. The breach is linked to the hacking group ShinyHunters, known for targeting cloud-based customer systems like Salesforce. These systems store large amounts of data, making them attractive targets for attackers. The breach highlights vulnerabilities in cloud-based customer relationship management environments, where attackers exploit weak access controls and misconfigured settings to extract data.