Overview
Affected bookings mainly have usage dates in 2022–2026. Most involved names and booking details; some also included email, phone, nationality, extra answers or ticket codes. Cards, banking details and passwords were excluded. No total is given and the two occasions are not added as independent populations.
Timeline
- Occurred
- Discovered
- Disclosed
First unauthorized access detected and blocked that day.
Second unauthorized access detected and blocked that day.
Combined incident notice published.
Organization response
Access was detected and blocked on each date. Travolution replaced servers and keys, revoked issued access rights, strengthened monitoring, reported to authorities and notified confirmed affected customers.
What you can do
Manage bookings through official channels and refuse unsolicited requests for payments, card details or passwords.
Sources
- Notice of Personal Data Breach and Our ApologyTravolution Inc. / Seoul PASS · 2026-11-09