Travala

bd_5cf40a13a5acd584 · schema v1 · pii pii-v1

Travala Pte. Ltd. notified the NH Attorney General of a data breach affecting one New Hampshire resident. On June 18, 2026, an unauthorized third party accessed Travala's production environment using compromised developer credentials leaked via infostealer malware. The attacker exfiltrated production databases containing customer personal data, including names, email addresses, postal addresses, nationality, dates of birth, telephone numbers, passport numbers, and usernames. Passwords were hashed. The company contained the incident by revoking access keys, blocking attacker IPs, and rotating credentials. Forensic review confirmed the scope on June 25, 2026. Notices are being sent to affected residents.

J jump to incidentP pin to compareR raw source