The Eurail Breach and the Digital ID Problem - Eurail wanted people’s passport number to let them ride a train. Now it's for sale on the dark web.

Seriously, why do these companies need our passport numbers just to book a train ticket? They can verify identity at the station if needed. This is pure data hoarding for who-knows-what reasons, and now everyone pays the price.

As someone who's worked in data security, the fact that a travel company was storing *unencrypted* passport numbers (which they almost certainly were for this to be so easily for sale) is just mind-boggling negligence. There's zero excuse.

Another day, another breach. Guess my identity is already out there a dozen times over. What's one more?

I mean, you have to show it at the border anyway. What's the big deal if they have a copy?