Now Hacked
EN-GB
Data breach

South Africa's LekkeSlaap suffers customer data leak after booking system breach

First reported · Last reported · 5 related reports

The calendar synchronisation system of South African accommodation booking platform LekkeSlaap was breached, exposing some customers' names, email addresses, phone numbers and booking references. A code flaw was exploited, and the company said it had contained the incident and that payment information, identity document numbers and passwords had not been exposed. Phishing attempts exploiting the exposed booking information were reported, while the number of people affected was not disclosed.

Key facts

Affected organisation
LekkeSlaap
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Some customers' names, email addresses, phone numbers and booking references exposed; number of people affected undisclosed
Cause / method
Unauthorised access to the calendar synchronisation system through exploitation of a code flaw
Location
South Africa

If your data was exposed

Exposed dataNamePhone numberEmailUsage & purchase history

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. Unauthorised access to booking information through exploitation of a code flaw and phishing attempts using the exposed information came to light.
  2. The company said it had contained the incident and that payment information, identity document numbers and passwords had not been exposed.
  3. Concerns arose about targeted phishing, including WhatsApp messages citing genuine booking details to solicit payments.

5 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.