Cyberattacks Target French Tourism Sector, Exposing Millions of Booking Records France’s tourism industry faced a wave of cyberattacks over the weekend, with three major booking platforms breached by a single hacker. The latest victim, Gîtes de France, confirmed unauthorized access to data from 389,000 clients who booked stays between 1995 and 2026. Exposed information includes names, contact details, booking dates, and locations but no financial data. Affected regions reportedly include Guadeloupe, Cantal, and Haute-Garonne, with impacted customers notified via email on May 18. The attacks follow breaches at Pierre & Vacances-Center Parcs (1.6 million bookings compromised) and Belambra (41,000 detailed reports, 42,000 customer bookings, and 360,000 child-related data points). All three companies plan to file complaints with France’s public prosecutor and the CNIL (data protection authority). The hacker, allegedly seeking to expose cybersecurity vulnerabilities, reportedly told French Breaches a site tracking cyber incidents that the motive was to highlight France’s weak defenses. The stolen data risks appearing on the dark web, increasing the likelihood of phishing scams targeting victims. Authorities warn that attackers may use the exposed details to lend credibility to fraudulent communications.