Amtrak
ent_2170323a9acc9a9a93a25988
Disclosures
7
Leak Site · State AG · 5 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
49,289
as filed · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Amtrak
- Normalized
- amtrak— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- amtrak.com
Disclosure history (7)newest first
- GLOBALLeak Siteas victim2026-04-11
Over 9.4M Salesforce records containing PII and other internal corporate data have been compromised. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
- 🦬Montana State AGas victim2020-11-05
Amtrak reported a data breach to the Montana Attorney General. The breach was reported on 2020-11-05. The breach occurred on 7/24/2020. 72 Montana residents were affected.
- 🦞Maine State AGas victim2020-11-04
On July 24, 2020, National Railroad Corporation (Amtrak) discovered an external system breach that occurred on the same day. The breach affected 49,289 individuals. Amtrak provided written notification to affected consumers on November 5, 2020, and offered 12 months of identity theft protection services through Experian.
- 🐻California State AGas victim2020-11-04
National Railroad Corporation (Amtrak) detected unauthorized access to Amtrak Guest Rewards accounts on July 24, 2020. Compromised usernames and passwords were used to access accounts, potentially exposing personal information. No financial data or SSNs were compromised. The company reset passwords, implemented safeguards, and offered one year of Experian IdentityWorks. The incident is resolved.
- 🌲Washington State AGas victim2020-11-04
Amtrak, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2020-07-24 and filed notice on 2020-11-04. 1,208 Washington residents were affected. 103 days elapsed between awareness and notification.
- 🦬Montana State AGas victim2020-05-29
Amtrak reported a data breach to the Montana Attorney General. The breach was reported on 2020-05-29. The breach occurred from 4/16/2020 to 4/17/2020. 22 Montana residents were affected.
- 🐻California State AGas victim2020-05-28
On April 16, 2020, Amtrak detected unauthorized access to certain Amtrak Guest Rewards accounts using compromised usernames and passwords. The incident occurred between April 16 and April 17, 2020. Amtrak terminated access within hours, reset passwords, and engaged cybersecurity experts. No financial data or SSNs were compromised. Affected customers were offered one year of Experian IdentityWorks.