2026 SamBoat — customer notice; names/DOB/email/phone copied (banks/IDs said not stored)
Data compromised
First name, last name, date of birth, email, phone. Company says bank details (not stored on servers) and identity documents not affected. No public count.
Technical writeup
Boat-rental marketplace SamBoat (samboat.com / samboat.fr) emailed customers about a cybersecurity incident involving unauthorized access and copying of certain personal data. The notice lists affected fields as first name, last name, date of birth, email, and phone; it states bank details are not stored on SamBoat servers and identity documents were not affected. Troy Hunt publicly flagged the “not compromised” list as incomplete-looking on August 21, 2026. No affected-person count was published. companyConfirmed true; recordsAffected 0.
Root cause
Cybersecurity incident with unauthorized access and copying of certain personal data (company email notice)