Ticketing provider Vivaticket hit by ransomware, halting online sales at French museums and the national library

A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data ^[1]. According to 01net and BFMTV, Vivaticket said several hosting servers were encrypted; its clients include the Louvre, Musée d'Orsay and the Eiffel Tower, and the national library and others could not sell tickets online for days ^[2][3]. People who bought tickets online at affected venues should watch for fraudulent emails impersonating the venue or Vivaticket, as Louvre-Lens advises ^[2].

Industries mainly affected: Technology, Media, entertainment & gaming

1. Watch for fraudulent emails impersonating the museum or Vivaticket ^[2].
2. To exercise data rights, contact the venue's data protection officer, such as via Grand Nancy's form .