Summary
In April 2026, the hacking group ShinyHunters reportedly breached Amtrak, exposing over 2 million accounts with unique email addresses, names, physical addresses, and customer support records. The group is known for compromising organizations' Salesforce instances to extract sensitive data and demand ransom. If not paid, they release the data publicly, as seen in this incident.