A dataset attributed to Amtrak appeared on Have I Been Pwned, reportedly exposing customer emails, names, addresses and support interaction records.