Amtrak
bd_3dca81f577463bc3 · schema v1 · pii pii-v1
Full breach record for Amtrak →4 incidents on fileAmtrak notified the New Hampshire Attorney General on November 4, 2020, regarding a security incident affecting 245 New Hampshire residents. On July 24, 2020, Amtrak detected unauthorized access to certain Amtrak Guest Rewards accounts. Usernames, passwords, and associated personal information (mailing/email addresses) were compromised. No financial data or SSNs were affected. Amtrak locked accounts, reset passwords, geo-blocked access, and engaged outside cybersecurity experts. Affected individuals received a complimentary one-year Experian IdentityWorks membership.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 24, 2020
Discovered
Nov 9, 2020
Filed
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Montana State AGbd_00fb63d5aaac710b2020-11-05 · +4dVerified
- Maine State AGbd_3b6e36d60242cb512020-11-04 · +5dCandidate
- California State AGbd_970e71f598be3db92020-11-04 · +5dVerified
- Washington State AGbd_f2ad5e3d1d8ef1412020-11-04 · +5dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Nov 4 (ME), last Nov 9 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.