Travala data breach (2026)

⛰️New Hampshire State AG

Filed Jun 29, 2026bd_5cf40a13a5acd584

Travala Pte. Ltd. reported a data security incident to the New Hampshire Attorney General on June 29, 2026. On June 18, 2026, an unauthorized third party accessed production databases using leaked developer credentials obtained via infostealer malware. The attacker exfiltrated customer personal data, including names, emails, addresses, passport numbers, and usernames, affecting one New Hampshire resident. The company revoked access keys, rotated credentials, isolated servers, and engaged external security specialists.

🍁Vermont State AGlinked via multistate filing link · 100%

Filed Jun 29, 2026bd_fd012d8c39a179c5

Travala Pte. Ltd. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-29. The reporting organization type is Other Commercial. 1 Vermont residents were affected. Categories of data breached: Government ID Numbers.

🏎️Indiana State AGlinked via multistate filing link · 100%

Filed Jul 5, 2026bd_120e7222fb9ed6a1

Travala Pte Ltd reported a data breach to the Indiana Attorney General. The breach occurred on 2026-06-18 and was reported on 2026-07-05. 7 Indiana residents were affected. 2,305 individuals affected in total.

Affected (this filing): 2,305

Travala

Litigation Timing

Sensitive data

Timeline