Reserver.fr
ModerateReportedTransport and travel
A cybercriminal using the alias "Alduin" published on 25 September 2026 a database presented as an old MySQL backup, dated 2024, from Reserver.fr, a French travel agency specializing in flight bookings, along with a copy of the site's WordPress source code. The file, about 287 MB covering roughly 34,000 lines, mixes login identifiers, names, email addresses, IP addresses, dates and messages left on the site. Fuites Infos estimates the incident affects about 13,900 distinct individuals. Reserver.fr had not issued any public statement at the time of these reports, and the exact age of the data remains uncertain.
Cross-referencing names, emails, IP addresses and messages allows several pieces of information to be linked to the same person, facilitating targeted phishing.
- Disclosed on
- September 25, 2026
- Accounts affected
- 13,900
- Sector
- Transport and travel
- Country
- France
- Cause
- Misconfigured database
Exposed data
- Full name
- Email address
- Customer ID
- Connection data (IP, logs)
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact