Cybersecurity incident — 2020-05-29 00:00:00
Affected organization: Amtrak
Affected country: United States of America
Industry: Transportation and Warehousing
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Undetermined
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

The National Railroad Passenger Corporation (Amtrak) discloses a data breach that may have resulted in the compromise of customer personally identifiable information (PII). The data breach was discovered on April 16, 2020 and was carried out via compromised credentials.