2.15M accounts from Amtrak (amtrak.com) were exposed in this breach. Besides email addresses, it included names, physical addresses and support tickets.
Was your email address in this breach?
We display where your address leaked and what went with it. We never store the address.
We don't store your address. It is checked right here against about 1029 breaches, including this one.
Email addressesNamesPhysical addressesSupport tickets
In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.
Source: Have I Been Pwned (CC BY 4.0)