Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: CSX Transportation, Inc.
  • Street Address: 500 Water Street, J-150
  • City: Jacksonville
  • State, or Country if outside the US: Florida
  • Zip Code: 32202

Submitted By

  • Name: Theodore J. Kobus III
  • Title: Partner
  • Firm name (if different than entity): Baker & Hostetler, LLP
  • Telephone Number: 212-271-1504
  • Email Address:
  • Relationship to entity whose information was compromised: Outside Counsel

Breach Information

  • Total number of persons affected (including residents): 12867
  • Total number of Maine residents affected: 10
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 12/25/2020
  • Date Breach Discovered: 02/09/2021
  • Description of the Breach:
    • Other, External system breach (hacking)
    • If other, please specify: Accellion, Inc. FTA vulnerability incident
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 03/16/2021
  • Copy of notice to affected Maine residents: CSX Maine Appendix and Sample Letter.pdf
  • Date of any previous (within 12 months) breach notifications: N/A
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 1 Year, TransUnion, Credit Monitoring and Fraud Protection Services