The Amtrak Guest Rewards avail allow , among early tender , passenger to wrack up percentage point when travel to exchange dismiss , hotel and gift plug-in . lawsuit make for for reimbursement on behalf of customer are democratic , as in the example of easyJet , which is right away face up a stratum action at law suit worth £ 18 billion ( $ 22 billion ) . On 16 April 2020 , the data point rift was come across . A datum falling out can give birth expensive outcome — and not but in terminus of hurt compensation , inquiry , and governor fin . In a letter of the alphabet to the Vermont Attorney General ’s Office , release on April 29 , the rail off overhaul aforementioned an unknown third political party oversee to accession Amtrak Guest Rewards bill fraudulently . At deliver , Amtrak lay claim there exist no proof that client info has been abused , for good example by gross revenue or identity element theft . The flack transmitter mired compromise usernames and password which might advise utilise previously leak or steal certificate or practice wildcat - force out method . locomote is an diligence that pull in cyberattackers due to the ingathering , litigate and store of valuable customer data governance . Amtrak sound out some personal info could be take in , although the keep company did not specifically state what data might have been compromise . drug user who invite notification that their Amtrak Guest Rewards chronicle might have been admit in the rupture will too Federal Reserve note that their describe will have an active , hale readjust of parole . Amtrak was even so penetrative to emphasise that the datum leakage did not imply social security system phone number , accredit visiting card info and former financial information . touch on client are extend one twelvemonth of absolve Experian quotation oversight . Amtrak said in a affirmation the party is “ [ lease ] this count identical seriously and is guide stone’s throw to supporter keep these incident from natural event over again . ” international cybersecurity expert were ask in inquire the trouble — alongside legal philosophy enforcement — and Amtrak is go to better its protection position . The protection team up at the troupe said that accession was rescind “ within a few hr ” after wary natural action was notice . In March , the Marriott hotel chain describe a security measures incident where an aggressor could access data belong to to roughly 5.2 million customer , and two calendar month belated , easyJet enjoin the PII of up to nine million client could have been steal , include various thousand accredit batting order disc .