Ransomware Leak shinyhunters

National Railroad Passenger Corporation (amtrak.com)

Data leak attributed to shinyhunters, first discovered on 2026-04-12. Approximately 6,954,472 records were reported exposed.

Threat group
shinyhunters
Records exposed
6,954,472
Discovered
2026-04-12
Country
US
Indexed
2026-06-13
Website
amtrak.com

About this leak

Over 9.4M Salesforce records containing PII and other internal corporate data have been compromised. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 11 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK

Worried your information is in this or another leak? Run a free, anonymous search across millions of ransomware and infostealer records.