I recently received an email from Eurail about a “security incident involving personal data,” and I wanted to check if others got the same message and whether it’s actually legitimate.
The email looks quite official (correct branding and sender address), but it starts with a generic “Dear Customer” and mentions a security issue without many details, which made me a bit suspicious.
