Breaches and incidents
Wakacje.pl (Poland): travel portal says employee mailboxes accessed, customer passport data reported exposed
Per RMF24 and Interia, Wakacje.pl said the leak occurred on 29 September through “unauthorized access to part of employees’ work mailboxes” (Interia also...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Per RMF24 and Interia, Wakacje.pl said the leak occurred on 29 September through “unauthorized access to part of employees’ work mailboxes” (Interia also cites the customer service system), affecting “a small part of customers”; Niebezpiecznik, as cited, reported passport data, phone numbers, addresses, emails, names and birth dates.
- Root cause: not disclosed beyond mailbox access; the company said the data came from reservation-related correspondence.
- No attacker named.
- The company said payment systems were not affected, the data does not allow logging into the Client Panel, current reservations were unaffected, affected customers were informed and law enforcement notified.