Eurail passengers taken for a ride as data breach spills passports, bank details