Dear Customer,

In a climate of heightened cyber-risk, companies are exposed to a growing number of increasingly sophisticated cyber-attacks capable of bypassing even the most robust security protocols. Unfortunately, our Group has not been spared and has been targeted by a cyber-attack.

As a customer, we would like to inform you that you are affected by this act of violation.

Some of your details have been exposed: your civil status information, postal address, telephone number, email address, customer number and, for a limited number of you, your bank details.

However, no sensitive information within the meaning of the GDPR was affected by this breach.

As soon as we became aware of this attack, we immediately took the necessary emergency measures in response, enabling us to successfully close all access to our systems. The incident is now closed, and your data is safe. Our legal department has made the necessary notifications to the French data protection supervisory authority, the CNIL. A complaint has also been lodged with the Public Prosecutor.

In this context, you should be aware that there is a risk that the hacked data could be used and/or linked to other stolen databases, even though to date we have not received any information or reports of this information being used in any way whatsoever.

We nevertheless invite you to take the following precautions:
• Change your password associated with your account on our customer space;
• Be cautious with your email and only open emails from verified senders;
• Never communicate any personal or confidential information, including your bank details or login details, by email or telephone.

Finally, we would like to remind you that we will never ask you for your bank details over the telephone when you book with our Group - a payment link will be sent to you by email.

Please be assured that our teams are constantly working to strengthen our security protocols and to ensure that such incidents do not happen again, and we hope that this episode has not had any significant consequences for your personal data.

If you have any questions, please do not hesitate to contact us at dpo@odalys-vacances.com with your full name, booking number, place and dates of stay.

Thank you for your understanding.

The Odalys Group

                                              To unsuscribe