Cyberattack Disrupts Amtrak Guest Rewards Accounts in Breach

Published:

Recent Data Breach: Amtrak Guest Rewards Accounts Compromised

Amtrak, the national passenger rail service, recently disclosed a data breach that has left train travelers’ Guest Rewards accounts compromised. The breach occurred from May 15-18, when an unknown third party gained unauthorized access to a database containing account information.

The compromised data includes a treasure trove of sensitive information such as names, contact details, account numbers, birth dates, payment details, gift card information, and transaction histories. In some cases, hackers even took control of accounts and changed email addresses and passwords to lock out legitimate users.

Amtrak has taken steps to address the breach by resetting account passwords and email addresses for affected users. However, the exact number of impacted individuals has not been disclosed. The company is urging riders to rotate their passwords and implement multifactor authentication to prevent further unauthorized access.

This isn’t the first time Amtrak has experienced a data breach involving Guest Rewards accounts. In 2020, a similar incident occurred where personal information was viewed by unauthorized parties. Stuart Wells, Jumio CTO, emphasized the importance of implementing advanced verification technologies to protect consumer accounts from fraud.

As cyber threats continue to evolve, businesses must prioritize the security of user data by adopting robust identity verification systems. Biometric verification methods are highlighted as an effective way to hinder hackers and illegitimate users from gaining access to compromised accounts. This approach not only safeguards personal information but also serves as a powerful tool in combating fraud.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Federal contractors may soon face new cybersecurity rules for handling controlled unclassified information

Federal contractors handling sensitive information may soon face significant changes in cybersecurity regulations concerning controlled unclassified information (CUI). Proposed federal regulations, which could be...

HPE security advisory AV26-1011 warns of vulnerabilities in AOS-S and CPPM products

Hewlett Packard Enterprise (HPE) has issued a security advisory (AV26-1011) regarding vulnerabilities affecting its AOS-Switch and ClearPass Policy Manager (CPPM) products. As of October...

Alleged Ploutus malware creator Anibal Canelon Aguirre appears in Nebraska court

The alleged mastermind behind the Ploutus malware, Anibal Alexander Canelon Aguirre, made his first court appearance in Nebraska after being apprehended by federal authorities....

AI-enabled threat actor JadePuffer automates destructive actions in cloud environments using Azure service principals

Recent research from Check Point has revealed that the AI-enabled threat actor known as JadePuffer, tracked as Storm-3168, is leveraging compromised Azure service principals...