Oliver's Travels said it discovered on October 20, 2026 that an unauthorized third party had accessed some of its systems, including its booking system, with the incident believed to have begun on October 19 [1]. Accessed data include names, emails and phone numbers of customers and companions, villa addresses, holiday dates, booking values, amounts paid, outstanding balances and due dates, with no evidence card or bank details were taken [1]. Oliver's Travels asks customers to be particularly careful about unexpected requests for extra payments or changed payment details and not act until checking with it on 0333 042 8580 [1].
UK villa holiday firm Oliver's Travels: booking system breached, trip and payment balance data accessed
1 min read
- Disclosed
- Oct 20, 2026
- Occurred
- Oct 19, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Verify payment requests verify[1]
Check any payment request with the company by phone first.
References
Official / primary1
- [1]Oliver's Travels2026-10-20Accessed 2026-11-11Snapshot 2026-11-11 sha256 bc01b2675f60
“On 20 October 2026, we discovered that an unauthorised third party had gained access to some of Oliver’s Travels’ systems, including our booking system.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.