Wakacje.pl confirms cyberattack and potential passport data leak

The travel service Wakacje.pl has confirmed a cyberattack that occurred on September 29, 2026. Unauthorized individuals gained access to some employee email accounts and the customer service system.

While the company stated the incident was limited to a small group of customers and did not affect payment systems, sensitive personal information may have been compromised. Potential data leaks include names, email addresses, phone numbers, residential addresses, dates of birth, and information from passports or other travel documents.

Wakacje.pl has notified the affected individuals directly and advised all customers to remain vigilant against potential fraud and identity theft attempts.