2026 Adventure (skyticket) — unauthorized access; ~14.64M PII pieces (~4.13M passwords)
Data compromised
~14,640,000 personal-information pieces (~4,130,000 include passwords); ~17,780 ops-management access cases; ~12,000 reservation views. Passport images and card numbers not stored/leaked per company; stored-card payments suspended.
Technical writeup
Verified Adventure, Inc. IR notice Oct 9, 2026 — Unauthorized access to skyticket may have leaked approximately 14.64 million pieces of personal information (about 4.13 million including member passwords), with additional 17,780 operational-management access cases and about 12,000 reservation information views. Company states credit-card numbers and passport images were not stored/leaked; stored-card payments stopped; vulnerabilities addressed; PPC reported. Investigations continue.
Root cause
Unauthorized access to skyticket servers / business management systems (three access instances per IR notice)