CSX Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the CSX data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About CSX
CSX Transportation Inc. is a major freight railroad company based in Jacksonville, Fla. Founded in 1827, CSX connects customers to key ports, distribution centers and major cities throughout the eastern United States. CSX provides a range of transportation services, including rail, intermodal and rail-to-truck transload options.
What Happened?
CSX experienced a data breach involving unauthorized access to its Microsoft 365 environment.
The incident occurred between May 29, 2026, and June 9, 2026, after an employee responded to a vishing call, which allowed an unauthorized party to access and acquire files containing sensitive information.
In addition, in April 202, a third-party vendor may have disclosed CSX data to an unauthorized party.
CSX began mailing notification letters to affected individuals on Oct. 20, 2026. The breach impacted current and former employees as well as third parties, with at least 57 New Hampshire residents and nine Vermont residents reported as affected.
The following information was potentially compromised as a result of the incident:
Information Exposed:
- Names
- Social Security numbers
- Driver’s license numbers
- Banking information
You May Be Entitled to Compensation
If your information was compromised in the CSX data breach, you may be eligible for compensation. Lawyers are ready to help individuals affected by this incident seek justice and possible financial recovery. To find out if you qualify to join a lawsuit related to this data breach, complete the below form.
.png)