Breaches and incidents

TUI Belgium: booking details used in WhatsApp phishing, data leak confirmed

Per ANP (via Welingelichte Kringen) a TUI spokesperson said “a number of our travelers have been approached by fraudsters via WhatsApp” and that the...

Disclosed
Verification
Confirmed by two or more outlets

What happened

  • Per ANP (via Welingelichte Kringen) a TUI spokesperson said “a number of our travelers have been approached by fraudsters via WhatsApp” and that the incident appears limited to Belgium; Aerotelegraph reports TUI confirmed the data leak and engaged an international investigation team. Customers reported messages with their full name, booked hotel and exact travel dates.
  • Root cause: not disclosed; Aerotelegraph says it is unclear how the incident happened and whether the phishing data came from the confirmed leak.
  • No attacker named.
  • TUI warned all customers not to click suspicious links or make payments; it did not disclose the number affected or the data involved.