Center Parcs, the large chain of holiday villages in the heart of nature, announced that it had suffered a cyberattack. The group, which has seven resorts in France, is pointing to an intrusion into its telephone booking system. To block the hackers' access, Center Parcs decided to suspend access to the affected system. The attack was halted on June 6, two days after the intrusion was detected. The company explained that it had taken "technical corrective measures to improve system security."
Data of 20,000 customers hacked
Despite the rapid response of Center Parcs teams, the attackers were able to seize a mountain of data concerning bookings. The compromised information includes first and last names, email addresses, phone numbers, and other booking details, such as location and length of stay. Center Parcs describes the data as "relatively limited."However, this is more than enough to develop convincing and highly effective phishing attacks.
However, bank details, passwords, postal addresses, and phone numbers were not compromised during the intrusion. The data breach affects around 20,000 customers from several European countries.
Center Parcs is currently notifying all affected individuals. For the moment, the group is not aware of any ongoing attacks exploiting the stolen personal information. However, customers of the chain are advised to exercise extreme caution. With the summer holiday season fast approaching, cybercriminals could be tempted to use the stolen data to trap travelers.
Center Parcs indicates that it has reported the incident to the CNIL (National Commission for Information Technology and Civil Liberties), in accordance with the GDPR (General Data Protection Regulation). The mention of the CNIL proves that French people are affected by the leak.
Furthermore, the chain of the Groupe Pierre & Vacances-CenterParcs, which welcomes nearly 8 million customers per year, is considering filing a complaint with law enforcement. Center Parcs joins the list of companies that have suffered a data leak this year, alongside La Poste, Easy Cash, Kiabi and Chronopost.
Source: DataNews
0 Comments