Swedish ticketing provider Visit breached, exposing Skansen and other clients' guest data

Stockholm open-air museum Skansen said its ticketing provider Visit suffered a data breach that also affected several of Visit's other customers, and it was informed on October 27, 2026 ^[1]. Possibly accessed data include names, phone numbers, emails and ticket purchase details of guests who booked between October 23 and 26, with no identity numbers or card details affected; Visit says the vulnerability is fixed ^[1]. Skansen advises never sharing payment card details, passwords or BankID credentials by email or text, and changing any disclosed passwords immediately ^[1].

Industries mainly affected: Hospitality & food service

1. Do not click links or open attachments in suspicious messages ^[1].
2. Never share card details, passwords or BankID credentials by email or text ^[1].
3. Change any disclosed passwords immediately .