ENKR

MyRealTrip traveller data breach

Add to my breach check

Made public

What leaked7

Replaceable

  • Password

Hard to replace

  • Passport number
  • Mobile number
  • Email address

Permanent

  • Date of birth
  • Full name
  • Gender
  • Passport numberwith expiry date; some travellers only
  • Passwordencrypted in a way that cannot be restored, per the company

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover
  4. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: phishing messages
  5. Register as an exposed person with the FSSabout 10 minLimits harm from: applications with your ID (opens in a new tab)
  6. Block new loans and cards in your nameabout 10 minLimits harm from: applications with your ID (opens in a new tab)

What happened next5 events

  1. UndetectedNone on record
  2. Response 5 eventsNo individual notice on record · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 5 events

Back to latest
  1. Opened a page to check whether and which data leaked
  2. Reported to the relevant agencies by the notice date
  3. By the notice, blocked the abnormal access and checked and fixed the systems involved
  4. Apologised to travellers in the notice
  5. Notice and apology on its website: unauthorised access around October 25, 2026 leaked traveller data
Company
MyRealTrip
When it happened
Made public
Notice
Leak confirmed
Affected
unknown; MyRealTrip travellers · count not stated; press

Sources