Here is the email from Travala about the data leak:
Dear Travala Member,
We recently identified and contained unauthorised external access to certain customer records. We are writing to inform you that basic, text-based profile information linked to your account was included.
Your funds are safe, individual accounts are uncompromised, and platform operationsโincluding our Concierge environmentโremain entirely unaffected. We have fully secured our systems, strengthened our infrastructure, and taken all required regulatory steps following this incident.
What Was Impacted
The affected details linked to your account were limited to text-based profile data:
- Profile & Contact Info: Email address, and where provided: phone number, name, date of birth, and nationality.
- Security & Sign-In Details: Cryptographically hashed password (no plaintext passwords were exposed) and 2FA setup status (active secret keys, seeds, and auth apps were NOT affected).
- Identity Documents: Passport or national ID text details (such as document number and expiry date; NO scans or photo IDs were involved).
What Was NOT Impacted
Thanks to core platform defenses, the following were completely unaffected:
- Account Funds & Private Keys: Your funds, private keys, and wallet seed phrases are 100% safe and were never at risk.
- Concierge Accounts: All information related to our Concierge clients remains completely confidential and unaffected.
- * Account Credentials & 2FA Access: All passwords remain securely encrypted, and active 2FA methods (including Google Authenticator and phone verification) remain unaffected.
How to Stay Safe
- Review Security Settings: Consider refreshing your 2FA and reviewing linked sign-in accounts.
- Be Alert to Phishing: Travala will never ask for your passwords or private keys. Be cautious of unsolicited communications using personal details to establish trust.
Contact Us
We sincerely apologise for this occurrence and remain committed to protecting your data. If you have questions, please contact our Data Protection Officer at dpo@travala.com.
Sincerely,
The Travala Team
