Tourism group Belambra announced on Saturday that it had been hit by a security incident exposing client reservation data, including that of many minors. The attack follows closely on a similar leak at rival Pierre and Vacances-Center Parcs.
According to specialist site French Breaches, the hacker claimed access to six months of data including more than 41 000 detailed reservations and around 360 000 records linked to minors. Belambra, which runs 44 vacation clubs in France, confirmed the incident and stated that no banking data, identity documents or passwords were involved.
The group said it had identified the fraudulent access to part of its digital infrastructure and had filed a complaint. It also notified the competent authorities.
The day before, Pierre and Vacances-Center Parcs had revealed a breach affecting 1.6 million reservations, potentially dating back ten years, on its La France du Nord au Sud platform. No banking data or email addresses were collected in that case either.