Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

US critical infrastructure monitor

CSX Corporation (CSX Transportation)

Logistics and transportation · FL (headquarters)

Monitoring
Not directly monitored. Shown from research findings only.
Public findings
1
Provider status posts on record
0

Cyber and operational findings

Analyst-reviewed records. The grade states how well the cause is established; event, first public observation and acknowledgement are separate dates.

A ConfirmedStatus: recovered

Employee answered a vishing call; unauthorized party accessed CSX Microsoft 365 and acquired files 2026-05-29 to 2026-06-09; detected via unusual-activity alert in June; on 2026-08-26 CSX determined files held personal information.

Event: May 29
First public: Oct 20
Third-party report: Oct 21
Acknowledged: Oct 20

Other explanations considered: Aggregator lag, not a new incident.

  1. 2026-05-29 to 2026-06-09 · DET
    Employee answered a vishing call; unauthorized party accessed CSX Microsoft 365 and acquired files 2026-05-29 to 2026-06-09; detected via unusual-activity alert in June; on 2026-08-26 CSX determined files held personal information.
    Source
  2. 2026-05-29 to 2026-06-09 · DIS
    In-window resurfacing: security news roundup of 2026-11-03 presents the CSX breach as fresh news. Date-discipline hazard: this is the May-June 2026 intrusion notified 2026-10-20, not a new event. No operational impact on rail service reported at any point.
    Source
  3. Oct 20 · DIS
    AG/consumer-agency notices: New Hampshire (57 residents, filing dated 2026-10-20), Massachusetts OCABR (434), Vermont (count not shown); Maine AG portal lists CSX (page 403 to fetcher). Data: names, SSNs, driver's license numbers, bank account and routing...
    Source
  4. Oct 20 · REM
    24 months credit monitoring via Epiq Privacy Solutions ID; dedicated incident line 888-619-1563.
    Source

Provider status posts

Collected from the organisation's own public status page. These are its words; DFX adds only the wording classification.

No status posts collected for this organisation.