PHP Vulnerability Responses by Company

Interrail B.V.

Companies / web services
Aliases / services
Eurail B.V. / Eurail / Interrail / ユーレイル / インターレイル / Interrail B.V.
Official website
https://www.interrail.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Interrail/former Eurail passes and Rail Planner

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The FAQ updated 2 October 2026 confirms exfiltration of files containing some customers’ information. Affected fields differ by person and are specified in individual notifications.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Update your Rail Planner password. Do not disclose information to unsolicited contacts; promptly report unusual account transactions to your bank.

Official service URL

Source URLs

  1. Official FAQ on customer information exfiltrationhttps://help.interrail.com/hc/en-001/articles/33099495189917-What-happenedService and operation documentation
  2. Affected data categorieshttps://help.interrail.com/hc/en-001/articles/33123794076829-What-personal-data-may-be-involvedService and operation documentation
  3. Recommended customer actionshttps://help.interrail.com/hc/en-001/articles/33123849412893-Do-I-need-to-take-any-actionService and operation documentation
Related official sources
  1. Legal operatorOfficial information directoryCompany information identifies the same entity formerly Eurail B.V. until 1 May 2026, registration 30206952; the old brand is not a separate company.
  2. Official FAQ on customer information exfiltrationOfficial information directoryVerifies incident scope, disclosures and customer guidance.
  3. Affected data categoriesOfficial information directoryIndividual scope can include names, contact and identity-document details.
  4. Recommended customer actionsOfficial information directoryRail Planner password change and vigilance for suspicious contact/transactions.

Comments