'Eurail finished the email with "we take the security of your data seriously" - well, clearly not.' ...