European rail pass company Eurail is notifying over 300,000 people that their personal information, including names and passport numbers, was stolen in a December 2025 data breach. Hackers breached the company's cloud infrastructure and stole roughly 1.3 terabytes of data including database backups and support tickets, later posting samples on the dark web and Telegram after failed ransom negotiations. The company says it doesn't store credit card information or passport images, and is now sending written notifications to affected customers across multiple countries.