Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 7 sources · 3 days · First seen · Last updated
Wakacje.pl cyberattack and data breach
Overview
The Polish travel service Wakacje.pl, owned by the Wirtualna Polska holding, confirmed a cyberattack that occurred on September 29, 2026. Unauthorized actors gained access to certain employee email accounts and the company’s customer service system.
Initial reports indicated that while payment systems were not affected, sensitive personal information for a small group of customers may have been compromised. This data potentially includes names, email addresses, phone numbers, residential addresses, dates of birth, and information from passports or other travel documents.
As the situation developed, the company warned that the breach could lead to highly credible phishing attempts. Criminals may use the stolen details to impersonate hotels or travel organizers to solicit urgent payments or credit card updates. Experts have suggested that affected individuals consider reporting their passports as lost or stolen via the mObywatel application to mitigate the risk of identity theft.
Entities
Timeline
-
[TECHNOLOGY] 5 sourcesWakacje.pl suffers cyberattack exposing customer passport data
A cyberattack on the Polish travel platform Wakacje.pl has potentially exposed customer names, contact details, and passport data, prompting warnings against sophisticated phishing scams.
-
[TECHNOLOGY] 2 sourcesWakacje.pl confirms cyberattack and potential passport data leak
Travel service Wakacje.pl confirmed a cyberattack on September 29, 2026, potentially exposing customer passport data, contact details, and personal information.
Sources
fakt.pl · forsal.pl · gospodarka.gazeta.pl · natemat.pl · rynek-turystyczny.pl · spidersweb.pl · wirtualnemedia.pl