ZoomZoomTour security incident history
Hacking, data breaches and other security incidents involving ZoomZoomTour, with related coverage.
Incidents: 1 · Most recent
ZoomZoomTour hack and review page error expose customer and guide data
An external attacker exploited a service vulnerability at ZoomZoomTour to access customers’ and guides’ names, contact details, booking and travel information without authorisation, and submitted fraudulent cancellation requests for some bookings. A separate development error on a review page also left information about booking holders and their travelling companions accessible externally for about two years. ZoomZoomTour published an account of the incident and its response on 6 November 2026, in its CEO’s name, but did not disclose the total number of people affected.
Related reports: 4 →