Agent and customer data hacked through ABTA website
Data relating to around 43,000 individuals – agents, operators and customers – has been illegally accessed after ABTA’s website was hacked.
ABTA said the data security incident, which took place on February 27, was possible due to a vulnerability by the third party web developer and hosting company of its site.
The association said an individual has been identified in relation to the breach but it could not comment further as it was now in the hands of police.
It insisted the vast majority of the 43,000 relate to people who have registered on abta.com, with email addresses and encrypted passwords, or have filled in an online form with basic contact details which are at ‘very low exposure risk to identity theft or online fraud’.
But around 1,000 were files that may include personal identity information of customers of ABTA members in support of a complaint and 650 may include personal identity information of ABTA members.
All those affected are being contacted today and ABTA has also set up a special phone line: 0203 758 8779.
"I would personally like to apologise for the anxiety and concern that this incident may cause to any customer of ABTA or ABTA member who may be affected," said chief executive Mark Tanzer.
"It is extremely disappointing that our web server, managed for ABTA through a third party web developer and hosting company, was compromised, and we are taking every step we can to help those affected.
"I will personally be working with the team to look at what we can learn from this situation."
Tanzer said ABTA had become aware of the breach on March 1 but that it had taken some time to establish what had been accessed and whether anyone was at risk.
"ABTA immediately engaged security risk consultants to assess the potential extent of the incident. Specialist technical consultants subsequently confirmed that the web server had been accessed," he said.
He said the association was not aware of any information being shared beyond the infiltrator.
"We are actively monitoring the situation, but as a precautionary measure we are taking steps to warn both customers of ABTA members and ABTA members who have the potential to be affected.
"We are today contacting these people and providing them with information and guidance to help keep them safe from identity theft or online fraud. We have also alerted the relevant authorities, including the Information Commissioner and the police."
p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 14.7px Calibri; -webkit-text-stroke: #000000} span.s1 {font-kerning: none}
Bev
Editor in chief Bev Fearis has been a travel journalist for 25 years. She started her career at Travel Weekly, where she became deputy news editor, before joining Business Traveller as deputy editor and launching the magazine’s website. She has also written travel features, news and expert comment for the Guardian, Observer, Times, Telegraph, Boundless and other consumer titles and was named one of the top 50 UK travel journalists by the Press Gazette.
Have your say Cancel reply
Subscribe/Login to Travel Mole Newsletter
Travel Mole Newsletter is a subscriber only travel trade news publication. If you are receiving this message, simply enter your email address to sign in or register if you are not. In order to display the B2B travel content that meets your business needs, we need to know who are and what are your business needs. ITR is free to our subscribers.































France prepares for a massive strike across all transports on September 18
Turkish tourism stalls due to soaring prices for accommodation and food
CCS Insight: eSIMs ready to take the travel world by storm
Germany new European Entry/Exit System limited to a single airport on October 12, 2025
Airlines suspend Madagascar services following unrest and army revolt