CSX Data Breach Exposed Social Security Numbers

CSX, a freight railroad company headquartered in Jacksonville, Fla., disclosed a data breach involving unauthorized access to its Microsoft 365 environment.

CSX identified two separate and unrelated data security incidents that involved unauthorized access to its Microsoft 365 environment.

In the first incident, CSX learned that a third-party vendor may have disclosed company data to an unauthorized party in April 2026. The company's investigation of this vendor-related incident could not rule out the possibility that information related to current and former employees and third parties was shared with an unauthorized party.

The second incident began on May 29, 2026, when a CSX employee responded to a vishing call, allowing an unauthorized party to gain access to CSX's Microsoft 365 environment. Between May 29, 2026, and June 9, 2026, the unauthorized party accessed and acquired certain files from that environment.

CSX first became aware of this incident in June 2026 when it was alerted to unusual activity involving the employee's account. On Aug. 26, 2026, the company determined that one or more of the affected files contained personal information.

The types of information exposed included names, Social Security numbers, driver's license numbers and banking information.

The breach was disclosed to the attorneys general of New Hampshire and Vermont starting on Oct. 20, 2026. CSX began notifying affected individuals on Oct. 20, 2026.

CSX's response to the breach

The company is offering affected individuals complimentary credit monitoring and identity protection services through Epiq Privacy Solutions ID at no cost.

Affected individuals can enroll in the monitoring services by visiting www.privacysolutionsid.com and entering the activation code included in their notification letter. Indivdiuals with questions about the enrollment process can call Epiq directly at 866-675-2006, Monday through Friday, 9 a.m. to 5:30 p.m. ET.

CSX has also established a dedicated toll-free incident response linefor any questions or concerns individuals may have at 888-619-1563. The line is available Monday through Friday, 9 a.m. to 9 p.m. ET, excluding major U.S. holidays.