Lithuanian Travel Data Exposed on Russian Black Market
Personal travel details spanning over a decade are now circulating on a Russian data platform.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust travel agencies to keep your personal and passport information secure?
Personal information belonging to Lithuanian travelers has been leaked on a Russian black-market platform following a major security breach. The compromised data includes sensitive passport and travel records from bookings made between 2012 and 2026.
Why it matters
The breach exposes millions of individuals to potential identity theft and fraud due to the sensitive nature of the leaked travel and financial information. Authorities are now investigating the extent of the impact on consumers whose private data was harvested and destroyed by the attackers.
The leaked database contains 52 million hotel reservations and 252 million individual financial transactions. These records encompass data harvested from systems operated by tour companies Tez Tour and Join Up.
The players
Tez Tour
This tour operator is a major travel service provider that manages bookings across several international regions.
DataSuckers
This hacking group is identified as the entity that claimed responsibility for compromising infrastructure in Russia and Belarus.
State Data Protection Inspectorate
This Lithuanian government agency is tasked with monitoring data privacy and investigating security breaches involving personal information.
Join Up
This tour operator is one of the entities identified as having travel records involved in the recent data leak.
The details
The hacking group DataSuckers claimed responsibility for the breach, alleging they compromised tour operator Tez Tour's systems located in Russia and Belarus. The stolen information includes names, birth dates, telephone numbers, and specific passport details.
Timeline
Records exposed in the leak span travel activity from 2012 to 2026.
The DataSuckers group claimed responsibility for the hack in mid-September 2026.
The data leak was officially reported on October 21, 2026.
The Tech Race
This breach follows the broader trend of cybercriminal groups prioritizing the vast, centralized databases held by tourism operators to facilitate identity theft. It highlights the growing vulnerability of legacy booking systems as they face sophisticated, automated data harvesting attacks.
Travelers whose information was compromised may face a heightened risk of targeted phishing attempts and identity fraud. Users should monitor their financial statements and personal accounts for suspicious activity to mitigate potential misuse of their passport or travel data.
The takeaway
Travelers should treat any communication appearing to come from their past tour operators with increased scrutiny following this breach. Regularly updating passwords and enabling multi-factor authentication on financial accounts remains a critical defense against the fallout from large-scale data leaks.
Further reading
Learn more about the evolving landscape of global digital threats in our Cybersecurity section.
Source note: This article includes information reported by DELFI.
Live Poll
Do you trust travel agencies to keep your personal and passport information secure?
