What was exposed, when it happened, and which databases confirm it.
- accounts
- 40,290,708
- Breached
- April 3, 2026
- Last Update
- April 17, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. The exposed data contained over 2M unique email addresses along with names, physical addresses and customer support records.
Compromised Info
- Email addresses
- Names
- Physical addresses
- Support tickets
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
38,143,029 accounts DEHASHED reports beyond HIBP
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via AI direct match to LeakCheck (80% confidence)
- HIBP
FAQ
What was leaked in the Amtrak breach?
The Amtrak breach exposed: Email addresses, Names, Physical addresses, and Support tickets.
When did the Amtrak breach happen?
The Amtrak breach was disclosed on April 3, 2026 and affected 40,290,708 records.
Am I affected by the Amtrak breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Amtrak leak.