---
title: "Data breach at Oceania Hotels"
description: "French hotel group Oceania Hotels (Océania, Escale Océania, Nomad Hotels brands) confirmed that an unauthorized third party accessed booking data after a provider hosting its online reservation engine was compromised. The exposed data covers stays booked for August 2026 through July 2027: name, emai"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-20-oceania-hotels
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-20
dateModified: 2026-09-20
---
# Oceania Hotels

Data breach — Moderate

French hotel group Oceania Hotels (Océania, Escale Océania, Nomad Hotels brands) confirmed that an unauthorized third party accessed booking data after a provider hosting its online reservation engine was compromised. The exposed data covers stays booked for August 2026 through July 2027: name, email, phone number, booking reference, property identifier, stay dates and rates. The group states no banking data was involved, and it notified the French data protection authority (CNIL) and filed a complaint.

The exposed details (name, stay dates, booking amount and reference) allow highly credible phishing messages by SMS or WhatsApp impersonating the hotel.

| Fact | Value |
| --- | --- |
| Disclosed on | September 20, 2026 |
| Sector | Retail |
| Country | France |
| Cause | Third-party provider |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Customer ID
- Order history

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Oceania Hotels](https://frenchbreaches.com/alertes/oceania-hotels-muafduvclbs1sm0cei8) — FrenchBreaches
- [Oceania Hotels : fuite de données chez son prestataire de réservation](https://fuitesinfos.fr/article/2026-09-20-oceania-hotels) — Fuites Infos
- [Oceania Hotels : les réservations clients exposées après une cyberattaque](https://www.cyberattaque.org/oceania-hotels-les-reservations-clients-exposees-apres-une-cyberattaque/) — cyberattaque.org

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-20-oceania-hotels
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees