U.S. rail and locomotive company Wabtec Corporation was targeted by the Lockbit ransomware group in a cyber attack that exposed personal and sensitive information. The hackers breached their network and installed malware on specific systems as early as March 15th, 2022. LockBit also published samples of data stolen from Wabtec and eventually leaked all stolen data on August 20th, 2022, presumably after a ransom was not paid The stolen files contained sensitive personal information like Full Name, Date of Birth, Non-US National ID Number, Non-US Social Insurance Number or Fiscal Code, Passport Number, IP Address, Employer Identification Number (EIN), USCIS or Alien Registration Number, NHS (National Health Service) Number (UK), Medical Record/Health Insurance Information, Photograph, Gender/Gender Identity, Salary, Social Security Number (US),Financial Account Information, Payment Card Information, Account Username and Password, Biometric Information, Race/Ethnicity, Criminal Conviction or Offense, Sexual Orientation/Life, Religious Beliefs, Union Affiliation. The company sent notices of the data breach to all impacted individuals.

The Vermont Office of the Attorney General reported that Wabtec Corporation experienced a data breach on June 26, 2022, involving unauthorized access to sensitive information, including names and additional personal data. The breach was reported on December 30, 2022.