---
title: "Data breach at Misterbooking (groupe Septeo)"
description: "Misterbooking, a hotel management platform published by the Septeo group, suffered an intrusion on one of its application servers, reportedly starting on 18 October 2026 and detected on the morning of 19 October. The publisher states that a software vulnerability let a third party read the productio"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-20-misterbooking-groupe-septeo
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-20
dateModified: 2026-10-20
---
# Misterbooking (groupe Septeo)

Data breach — Critical

Misterbooking, a hotel management platform published by the Septeo group, suffered an intrusion on one of its application servers, reportedly starting on 18 October 2026 and detected on the morning of 19 October. The publisher states that a software vulnerability let a third party read the production database and extract part of its contents, and that it cut off the unauthorised access the same day. The data involved varies by hotel: identity and contact details, date of birth, nationality, ID document number, details and amounts of past and upcoming stays, and attachments that may include copies of identity documents. People travelling with guests, including minors, may appear in the records; no full payment card data is reported, and the number of people affected is not known.

Contact details combined with stay dates, ID numbers and possible document copies could let a malicious third party run targeted phishing or impersonate identities.

| Fact | Value |
| --- | --- |
| Disclosed on | October 20, 2026 |
| Incident dated | October 18, 2026 |
| Sector | Digital services |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Order history
- Identity document
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Misterbooking](https://frenchbreaches.com/alertes/misterbooking-mvgyucgy6374p06vxeb) — FrenchBreaches

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-20-misterbooking-groupe-septeo
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees