Hackers Derail Amtrak Guest Rewards Accounts in Breach

Hackers Derail Amtrak Guest Rewards Accounts in Breach

June 18, 2024 at 06:27PM

Amtrak disclosed a data breach affecting Guest Rewards accounts, emphasizing it was not a hack of their systems. Account data was accessed, including personal information, payment details, and loyalty points. Amtrak urged customers to rotate passwords and implement multifactor authentication. The incident is not the first for Amtrak, highlighting the need for advanced verification technologies to combat fraud.

Based on the meeting notes, the key takeaways are:

– Amtrak experienced a data breach in which an unauthorized third party gained access to a database containing account information between May 15-18.
– Compromised usernames and passwords from prior breaches were likely used to access certain accounts.
– The accessed information includes sensitive data such as name, contact information, account number, date of birth, payment details, and gift card information.
– Some accounts were taken over by hackers who changed emails and passwords, but Amtrak reset affected account passwords to rectify this.
– Amtrak did not specify the exact number of affected individuals but advised riders to change their passwords and enable multifactor authentication.
– This is not the first data breach incident for Amtrak, as a similar breach was disclosed in 2020.
– Stuart Wells, Jumio CTO, emphasized the need for businesses to adopt advanced verification technologies, such as biometric verification, to combat fraud effectively.

These clear takeaways summarize the essential points discussed in the meeting notes about the data breach incident and the need for enhanced security measures.

Full Article