The National Railroad Passenger Corporation (Amtrak) disclosed a data breach that led to the exposure of personal information of some Guest Rewards members. The company’s security team blocked the unauthorized third party from accessing the compromised Amtrak Guest Rewards accounts within a few hours after detecting suspicious activity. Amtrak didn’t disclose the total number of accounts impacted by the breach or the type of personal info potentially exposed. An Amtrak employee sold confidential passenger name reservation identification to U.S. Drug Enforcement Administration agents for almost two decades for $850,000.
Source: https://www.bleepingcomputer.com/news/security/amtrak-resets-user-passwords-after-guest-rewards-data-breach/