Hacker attack on Trenitalia passenger data

In October 2025 Trenitalia detected an attempted cyber attack caused by unidentified external parties. The event resulted in “access to some personal data of some of its passengers”. The episode concerned “exclusively some data associated with travel tickets”. No payment information, account login credentials, or credit or debit card information (card number, expiration date, and security code) was compromised. Trenitalia makes this known.

Trenitalia’s security measures

Trenitalia “immediately activated all necessary safety measures”. Only at the end of technical checks was it possible to proceed with the individual communications required by current legislation. Trenitalia notified the Personal Data Protection Authority and the competent bodies of the incident, as well as filed a complaint with the Public Prosecutor’s Office at the Court of Rome, collaborating fully with the Authority.