2026 Wakacje.pl — Sep 29 customer-service hack; names/DOB/passports (count unpublished)
Data compromised
Names, dates of birth, phone numbers, home addresses, email addresses, and passport details (TVP World citing Niebezpiecznik)
Technical writeup
Verified customer-facing incident — Wakacje.pl (Polish travel portal) messaged clients after a September 29, 2026 cyberattack affecting a customer-service system and several employee email accounts. TVP World (Oct 3) citing Niebezpiecznik reports attackers obtained names, DOB, phones, addresses, emails, and passport details; portal warned about fraudulent payment requests and suggested considering passport cancellation. Headcount unpublished — recordsAffected 0. companyConfirmed true.
Root cause
Cyberattack on customer-service system and employee email accounts (company customer message / Niebezpiecznik via TVP World)