Citybreak Online

Citybreak security incident: update

Información

Status: Monitoring · 28 October 2026, 09:00 CET

We recently identified unauthorized access to a very limited set of booking data from the Citybreak platform. The access was blocked, and we are working with independent security experts to complete our investigation. Cyber threats against the travel industry keep evolving, and we are using what we learn to further strengthen the security of our platform. The relevant authorities have been notified.

What you need to know

  • All VISIT systems incl. Citybreak are operating normally. Bookings, payments, check-in and point of sale work as usual.
  • Affected Citybreak customers have been contacted directly. If you are a Citybreak customer and have not heard from us, there is no action you need to take. VISIT does not contact travelers or guests. If you are a guest with a question about your booking, please contact the company you booked with.
  • No payment card data has been affected. VISIT does not store card details.
  • Your logins: if you can log in as usual, your user accounts are not affected. No credentials (login or API) were affected.
  • Our other products are not affected by this incident.

About the services listed below: we have selected all VISIT services so that every customer receives this update. This does not mean these services are affected. The incident concerned Citybreak only.

Sincerely,
The VISIT Team

Visit Group |  Kungsgatan 34-36 |  411 19 Göteborg |  Sweden |  +46 (0)31 38 06 000
www.visitgroup.com