Various small Brazilian ISPs
January 11, 2026
•[ DDoS attacks, SSH keys, security breach ]
Huge Networks' infrastructure and private SSH keys were used by an unknown adversary to launch DDoS attacks against multiple small Brazilian internet service providers. The company denied involvement, attributing the activity to a security breach discovered in January 2026.
Eurail
January 10, 2026
•[ security breach, data leak, unauthorized access ]
Eurail B.V. (also operating as Interrail) confirmed a security breach that resulted in unauthorized access to customer data. Eurail/Interrail publicly posted notice on January 10, 2026 and began emailing affected customers on January 13, 2026, with the investigation described as ongoing. The companys early review stated that impacted data may include customer order and reservation information along with basic identity and contact details. Where provided, it may also include passport information such as passport number, country of issuance, and expiry date, particularly for customers who received passes through the DiscoverEU program. The report also referenced exposure of bank details and advised customers to remain vigilant for fraud attempts while Eurail monitored for misuse and notified data protection authorities.