European rail pass provider Eurail has confirmed that customer data stolen recently by hackers has been offered for sale.