Data leak at travel agency Wakacje.pl. Customers told to freeze their PESEL number
Someone gained unauthorised access to the company's email accounts and customer management system. Addresses, dates of birth and passport details were exposed.
Key facts
- The incident took place on 29 September and was disclosed on 3 October.
- Leaked data: names, email addresses, phone numbers, home addresses, dates of birth and passport details.
- The company says its payment systems were not affected and the stolen data cannot be used to log in to customer accounts.
- Wakacje.pl reported the breach to the CSIRT NASK response team and to UODO, Poland's data protection authority.
What to do
- Freeze your PESEL (national ID) number in the mObywatel app or on gov.pl.
- Consider reporting your passport as compromised.
- Be wary of calls and messages claiming to be from Wakacje.pl, especially ones asking for payment.
Source: PAP, Bankier.pl (3 Oct 2026)