Club Tourism Server Breached, Personal Data of Approximately 4.32 Million Travelers Potentially Exposed

According to Security NEXT, Club Tourism detected third-party access to its servers on October 30, 2026; subsequent investigation confirmed the intrusion vector and method, indicating that some personal data may have been exfiltrated ^[1]. Approximately 4.32 million online booking member records may be affected, including names, addresses, phone numbers, dates of birth, nationalities, email addresses, member IDs, and emergency contact details ^[1]. The company has isolated the servers, blocked communications from the attack source, shut down the website, and notified police and regulatory authorities; services will be restored once remediation and security checks are completed ^[1].

Industries mainly affected: Hospitality & food service

The company has isolated the servers, blocked communications from the attack source, shut down the website, and notified police and regulatory authorities; services will be restored once remediation and security checks are completed ^[1].