CSX Data Breach Class Action Investigation

Employee Social Security numbers, driver's license numbers, and banking information were taken from CSX systems after an unauthorized party gained access through a phone scam. If you received a data breach notification letter from CSX, our data breach lawyers want to hear from you.

What Happened?

According to a notice filed with the New Hampshire Attorney General's Office, CSX was hit by a data breach involving its Microsoft 365 environment. The breach occurred on May 29, 2026, when an employee responded to a vishing call that allowed an unauthorized party into the system. Information exposed in the breach reportedly included names, Social Security numbers, driver's license numbers, and banking information. Affected individuals were notified by mail beginning October 20, 2026. Files were accessed and taken between May 29, 2026 and June 9, 2026. A separate incident involving a third-party vendor may also have exposed information about current and former employees in April 2026.

If you are a employee who worked at CSX, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

1. Monitor your credit reports and financial accounts for suspicious activity
2. Consider placing a fraud alert or credit freeze with all three major credit bureaus
3. Be alert to phishing emails or calls referencing the breach
4. Change passwords on any affected accounts and enable two-factor authentication
5. Keep a copy of your data breach notification letter for your records