Misterbooking (groupe Septeo)
CriticalReportedDigital services
Misterbooking, a hotel management platform published by the Septeo group, suffered an intrusion on one of its application servers, reportedly starting on 18 October 2026 and detected on the morning of 19 October. The publisher states that a software vulnerability let a third party read the production database and extract part of its contents, and that it cut off the unauthorised access the same day. The data involved varies by hotel: identity and contact details, date of birth, nationality, ID document number, details and amounts of past and upcoming stays, and attachments that may include copies of identity documents. People travelling with guests, including minors, may appear in the records; no full payment card data is reported, and the number of people affected is not known.
Contact details combined with stay dates, ID numbers and possible document copies could let a malicious third party run targeted phishing or impersonate identities.
- Disclosed on
- October 20, 2026
- Incident dated
- October 18, 2026
- Sector
- Digital services
- Country
- International or undetermined
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Order history
- Identity document
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact