Amtrak landed in April 2026 extortion coverage after ShinyHunters claimed a large Salesforce-class haul; Have I Been Pwned later catalogued roughly 2.1 million impacted accounts in its dataset view, stressing that listing is not a substitute for the railroad’s official notice.
Canonical record: Amtrak 2026 on BreachHistory.
Sources: Have I Been Pwned, Cybernews