---
title: "Data breach at GreenGo"
description: "GreenGo, a French accommodation booking platform, suffered unauthorized access between August 9 and September 7, 2026 to an internal data analysis tool built on Metabase, exploited through a vulnerability in that software as part of a wider campaign affecting other organizations. The access was disc"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-10-greengo
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-10
dateModified: 2026-09-10
---
# GreenGo

Data breach — Moderate

GreenGo, a French accommodation booking platform, suffered unauthorized access between August 9 and September 7, 2026 to an internal data analysis tool built on Metabase, exploited through a vulnerability in that software as part of a wider campaign affecting other organizations. The access was discovered on September 7 and cut off the same evening. Data potentially viewed includes names, dates of birth, email addresses, phone numbers, booking and stay information, reviews, favorites, in-platform messages, and, for gift card holders, the associated message, amount, recipient and code. No payment card data is involved, as payments are handled by a third-party provider.

The combination of identity data, date of birth, phone number and in-platform messages exposes affected individuals to targeted, well-informed phishing or impersonation attempts.

| Fact | Value |
| --- | --- |
| Disclosed on | September 10, 2026 |
| Sector | Retail |
| Country | France |
| Cause | Misconfigured database |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Date of birth
- Order history
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [GreenGo](https://frenchbreaches.com/alertes/greengo-mtwzey831kyjkwc99r) — FrenchBreaches
- [GreenGo victime d'une cyberattaque : données de comptes, réservations et messages consultés](https://www.cyberattaque.org/greengo-victime-dune-cyberattaque-donnees-de-comptes-reservations-et-messages-potentiellement-consultes/) — Cyberattaque.org
- [Fuite de données chez GreenGo : réservations et cartes cadeaux des clients concernées](https://fuitesinfos.fr/article/2026-09-10-greengo) — Fuites Infos
- [Faille Metabase chez GreenGo : ce que doivent décider la plateforme, les hébergeurs et l'éditeur](https://kohenavocats.fr/2026/09/11/greengo-metabase-hebergeurs-editeur-2026/) — Kohen Avocats

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-10-greengo
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees