Grupo Xcaret reports data breach affecting 8,300 customers

Grupo Xcaret has reported a security breach involving unauthorized access to its theme park sales systems. The incident, which occurred on October 21, resulted in the extraction of personal contact information, including email addresses and mobile phone numbers, for approximately 8,300 customers.

The company stated that the affected individuals represent less than 0.003 percent of its total annual records. Crucially, Xcaret emphasized that no financial data, such as bank accounts or credit card numbers, was compromised during the breach.

Following the leak, the company issued a warning regarding fraudulent activities. Scammers are reportedly using the stolen contact details to send fake emails and text messages attempting to collect fraudulent reservation payments. Xcaret clarified that it does not send payment links via SMS and advised customers to disregard any payment requests received through suspicious calls, messages, or email addresses not originating from their official domains.