[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1vs9miiskqqiz":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":32,"seoTitle":33,"seoTitleEn":34,"seoDescription":33,"seoDescriptionEn":35,"logoUrl":36,"isVerified":4,"isSensitive":4,"isSpamList":37,"isMalware":37,"company":38},"68e3266eda11adda48825123","bourse-des-vols","Bourse des Vols Data Breach","bourse-des-vols.com","2021-01-12T00:00:00.000Z","2022-07-03T05:17:56.000Z","2026-07-27T16:11:12.306Z","Third party breach","https:\u002F\u002Fbreaches.sencode.co.uk\u002Fbreaches\u002Fboursedesvols",[14,16,17],"https:\u002F\u002Fwww.goincognito.co\u002Falert-1460130-breached-accounts-at-bourse-des-vols\u002F","https:\u002F\u002Frecentdataleaks.com\u002Fbreach\u002Fbourse-des-vols-2021",1460130,"known",null,"unknown","Critical",[24,25,26,27,28,29,30,31],"Dates of birth","Email addresses","Flights taken","IP addresses","Names","Phone numbers","Physical addresses","Purchases","\u003Cp>The Bourse des Vols data breach is related to the exposure of customer records on the France-based flight search and travel booking service bourse-des-vols.com. The incident was recorded on January 12, 2021, and the confirmed impact is at the level of 1,460,130 unique email addresses. The association of the data with over 1,200 SQL files and a volume exceeding 9 GB indicates that the incident involves not only account information but also travel and customer profile fields.\u003C\u002Fp>\n\u003Cp>The verified data categories for this record are dates of birth, email addresses, flights taken, IP addresses, names, phone numbers, physical addresses, and purchase information. When travel history, address, and contact fields are found together, users can be targeted with more personalized fraud and phishing messages. Therefore, the Bourse des Vols record carries a higher privacy impact than a typical email breach.\u003C\u002Fp>\n\u003Ch2>Leaked Data Types and Risks\u003C\u002Fh2>\n\u003Cp>Verified data fields are email addresses, names, phone numbers, physical addresses, birth dates, IP addresses, flight history, and purchase information. Flight records and purchase information can provide clues about the user's travel habits, seasonal plans, or past destinations. When combined with address and phone information, this data can make targeted fraud attempts more convincing.\u003C\u002Fp>\n\u003Cp>Unverified person counts, data fields, and threat-actor claims are not treated as part of the public incident scope. Fake tickets, reservation changes, refunds, baggage fees, or travel insurance messages can be generated via email and phone. Fields like physical address and date of birth provide additional context that can be misused for authentication questions.\u003C\u002Fp>\n\u003Ch2>Verified Scope and Boundaries\u003C\u002Fh2>\n\u003Cp>The verified scope of this record is 1,460,130 unique email addresses and eight data categories: birth dates, email addresses, flights taken, IP addresses, names, phone numbers, physical addresses, and purchase information. Full payment card number, card security code, passport number, password, or session cookie are not among the verified data fields for this record. Purchase information does not mean that all details of the payment card have been leaked.\u003C\u002Fp>\n\u003Cp>The incident pertains to customer and travel records of the Bourse des Vols service. No additional breach assumptions should be made for airlines, hotels, comparison sites, or travel agencies in the same sector. The main figure in the record shows the impact on unique emails; the file volume or raw row count may differ from the number of users. Actions offered to the user should be determined based on verified data categories.\u003C\u002Fp>\n\u003Ch2>User Groups at Risk\u003C\u002Fh2>\n\u003Cp>The highest risk group consists of users who search for flights, make reservations, or create travel plans through Bourse des Vols. Travel history and purchase information can indicate which routes a person has shown interest in in the past or during which periods they have traveled. This information can be used in messages related to fake reservation updates, flight changes, refund notifications, or visa\u002Ftravel documents.\u003C\u002Fp>\n\u003Cp>Users with physical addresses, phone numbers, and birth dates can be targeted more personally. People who travel frequently, go on business trips, make reservations on behalf of their family, or use the same phone\u002Femail information on many travel services should be more careful. Even if a password leak is unverified, the combination of personal and travel data provides a strong foundation for social engineering.\u003C\u002Fp>\n\u003Ch2>Urgent Measures to Be Taken\u003C\u002Fh2>\n\u003Cp>Users who notice a match should review their Bourse des Vols account and related travel reservations. Users should verify reservation, refund, flight change, or additional fee notifications received via email, SMS, and phone directly through a trusted channel.\u003C\u002Fp>\n\u003Cp>Instead of logging in through links received in travel-related messages, one should go directly to the relevant airline, agency, or service. Unexpected files should not be opened, and messages requesting payment or identification documents should be particularly questioned. Users should be aware that their own name, phone number, address, or past flight information may appear in travel-themed scam messages involving cargo, baggage, ticket refunds, or insurance.\u003C\u002Fp>\n\u003Ch2>Long-Term Security Strategies\u003C\u002Fh2>\n\u003Cp>The Bourse des Vols incident shows that travel services carry highly valuable personal data. Users should regularly review the address, phone number, date of birth, and passenger information stored on travel sites. Accounts that are no longer used should be closed, unnecessary profile details should be reduced on accounts that cannot be closed, and unique passwords should be used for different services. Data minimization is also important when sharing travel plans on social media.\u003C\u002Fp>\n\u003Cp>For companies, such records indicate that customer travel data must be protected along with access control, backup management, file parsing, and retention period. On the user side, regularly auditing travel accounts, verifying incoming messages directly from a trusted channel, using two-factor authentication, and developing the habit of deleting unnecessary stored data provide long-term protection. Travel history can be used for social engineering even years later.\u003C\u002Fp>\n\u003Ch2>Record Control and User Action\u003C\u002Fh2>\n\u003Cp>The user should first assess which communication and travel information may have been included in this service, and then review the relevant reservation, customer account, and email security. In particular, unexpected travel-related messages should be carefully verified, even if they contain seemingly correct personal details.\u003C\u002Fp>\n\u003Cp>A match does not prove that a password or full payment card data has been exposed; however, the presence of name, address, phone number, date of birth, flight, and purchase information together is a strong security alert. Users checking incoming travel messages directly from a trusted channel, deleting unnecessary account data, using two-factor authentication on important accounts, and staying alert to fraud attempts reduces the risks that may arise from this breach.\u003C\u002Fp>","","Bourse des Vols Data Breach (1.5 Million Reported Records)","Bourse des Vols Data Breach. 1.5 Million reported records were reported. Reported data: Dates of birth, Email addresses, Flights taken. Review the scope…","\u002Fuploads\u002Flogo\u002Fbourse_des_vols_com.webp",false,{"name":39,"sector":40,"country":41,"website":9,"websiteArchiveUrl":33,"websiteStatus":33,"websiteCheckedAt":20},"Bourse des Vols","Travel \u002F flight booking","France"]