Les Embruns d'Oléron: data of 1,800 campsite holidaymakers exfiltrated

On 24 May 2026, Les Embruns d'Oléron — a 4-star campsite in Le Château-d'Oléron on the Île d'Oléron, France — appeared in a fresh leak published on a cybercrime forum. The poster claimed to have compromised the campsite's entire IT infrastructure and exfiltrated several dozen gigabytes of internal data covering both the running of the establishment and the management of holidaymakers' bookings.

The attacker said the data was pulled directly from a Windows server used for hosting and internal administration. The dump was reported to total around 39 GB across roughly 47,000 files, including reservation exports for 2024, 2025 and 2026. At least 1,832 vacationers were identified in a single 2026 booking file, with the true total potentially higher.

The exposed data reportedly included:

• First and last names
• Postal addresses, email addresses and phone numbers
• Reservation and stay records
• Billing and payment information
• Administrative documents, CRM data and communication histories
• Vehicle and pet declarations

As of the disclosure date, the campsite had issued no public statement about the alleged breach, and no specific threat group claimed responsibility. The status of the incident and any notification of affected individuals or the CNIL remains unknown.