Pierre et Vacances-Center Parcs Reports Data Breach Affecting 1.6 Million Bookings Pierre et Vacances-Center Parcs (PVCP) disclosed a data breach on May 15, 2026, impacting 1.6 million reservations on its subsidiary platform, La France du Nord au Sud (part of the Maeva brand). The company confirmed the incident after being alerted on May 14, 2026, revealing that exposed data may date back up to ten years. The breach involved non-financial personal details, including reservation numbers, stay dates and locations, guest names, phone numbers, and birthdates. PVCP clarified that no banking information or email addresses were compromised and stated that the vulnerability had been identified and patched. The group filed a complaint against unknown perpetrators (plainte contre X) and notified France’s data protection authority, the CNIL. The incident adds to a rising trend of cyberattacks targeting French organizations, including recent breaches at Free, Logis Hôtels France, Brit Hotel, and the ANTS (which exposed data on 12 million individuals in April 2026). France remains a high-priority target for cybercriminals, with attacks ranging from data theft to ransomware, according to cybersecurity reports.