Westbahn

Westbahn, also known by its alias Westbahn, is an Austrian railway company headquartered in Austria. As a railway operator, the company provides rail transportation services. Its operations involve running train services for passengers within Austria. The organisation does not process credit card data directly, as ticket payments are handled by external payment providers. This reliance on third‑party payment systems means that sensitive payment information is not stored in Westbahn’s internal systems.

On 19 October 2023, Westbahn suffered a cyberattack that targeted its administrative IT systems. The breach potentially exposed business, employee and customer data, although train operations continued without interruption. Because credit card handling is outsourced, the attackers did not obtain any payment card information. In response, Westbahn engaged external cybersecurity experts to contain the incident and began an investigation with internal and external specialists. The company notified relevant authorities and set up dedicated contact channels for individuals who might have been affected. Customers were advised to change their account passwords and to remain alert for possible phishing or spam messages resulting from the leak. Ongoing remediation work is underway to restore and secure the affected systems while improving future defenses.