CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employees ยท updates https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026 Rail freight company CSX is notifying about 40,000 current and former employees that their personal data was exposed. An attacker gained access to CSX's Microsoft 365 environment after an employee responded to a vishing (voice phishing) call, and accessed and took files between May 29 and June 9 2026. The exposed data includes names, Social Security numbers, driver's license numbers and banking information. CSX also disclosed a separate April 2026 incident in which a third-party vendor may have disclosed data about current and former employees. CSX began mailing notification letters on Oct 20 2026, has notified law enforcement and is offering free credit monitoring and identity protection. en Wed, 28 Oct 2026 00:00:00 GMT CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employees: CSX says it mailed notifications to about 40,000 current and former employees and offers complimentary credit monitoring and identity protection. https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026 https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026#2026-10-28-81326cb0 Wed, 28 Oct 2026 00:00:00 GMT medium <p><a href="https://www.wtol.com/article/news/local/employee-information-exposed-in-csx-data-breach/512-704cf584-bcbb-4a8d-976f-20d1f373dafb">Source</a></p> CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employees: CSX begins mailing breach notification letters and files notices with state regulators, including the Vermont Attorney General. https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026 https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026#2026-10-20-6f6e5dd9 Tue, 20 Oct 2026 00:00:00 GMT medium <p><a href="https://ago.vermont.gov/categories/security-breach-notices">Source</a></p> CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employees: A CSX employee responds to a vishing call, giving an attacker access to CSX's Microsoft 365 environment; files are accessed and taken until June 9. https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026 https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026#2026-05-29-a3f9a18c Fri, 29 May 2026 00:00:00 GMT medium <p><a href="https://www.isssource.com/rail-company-csx-hit-in-cyberattack/">Source</a></p> CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employees: A third-party vendor may have disclosed CSX data about current and former employees to an unauthorized party (a separate incident CSX disclosed alongside the main one). https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026 https://pwn.watch/i/csx-vishing-microsoft-365-employee-data-breach-2026#2026-04-a6ee82cc Wed, 01 Apr 2026 00:00:00 GMT medium <p><a href="https://www.isssource.com/rail-company-csx-hit-in-cyberattack/">Source</a></p>