Date of Breach
Allegation
Institution Type
Number Impacted
If you received an email or letter about a data breach from CSX Transportation or CSX Corporation (or simply “CSX”), your sensitive personal information may be at risk from two recent data breaches. Our firm is investigating this incident and can help you understand your rights and legal options.
On October 20, 2026, CSX reported to the New Hampshire Attorney General that it was investigating two incidents involving unauthorized access to its Microsoft 365 environment. The first was in April 2026, in which a third-party vendor may have disclosed data from CSX. CSX’s investigation could not rule out that information related to current and former employees and third parties was shared with an unauthorized party.
In what CSX describes as unrelated events, a CSX employee was made victim to a voice phishing (“vishing”) call on May 29, 2026, in which the employee allowed an unauthorized party to access CSX’s Microsoft 365 environment. The attacker accessed and acquired files from CSX’s environment from May 29 to June 9, 2026. CSX has been investigating both of these breaches and determined on August 26, 2026, that names, Social Security numbers, driver’s licenses, and banking information were among the information contained in the files accessed by the attacker(s).
On October 20, 2026, CSX mailed notification letters to individuals whose information was involved in the incident via First Class Mail.
According to CSX’s report to the New Hampshire Attorney General, the following categories of information were involved:
Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice letter or email from CSX, or if you are a current or former CSX employee, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.
Headquartered in Jacksonville, Florida, CSX is a Class I freight railroad company that is one of two dominant railroad companies in the Eastern United States.
UNDER THE RULES OF CERTAIN JURISDICTIONS, THIS WEBSITE MAY CONSTITUTE ATTORNEY ADVERTISING.
