On April 16, 2020, Amtrak detected unauthorized access to certain Amtrak Guest Rewards accounts using compromised usernames and passwords. The incident occurred between April 16 and April 17, 2020. Amtrak terminated access within hours, reset passwords, and engaged cybersecurity experts. No financial data or SSNs were compromised. Affected customers were offered one year of Experian IdentityWorks.