Vranken-Pommery: customer data exposed after a cyberattack on the ticketing system

On 10 April 2026, Vranken-Pommery — one of France's largest champagne houses, based in Reims — confirmed that it had been indirectly hit by a cyberattack, after a ransomware intrusion compromised the external provider running the online ticketing system for its tourist sites, the Domaine Pommery and the Villa Demoiselle.

The breach did not target Vranken-Pommery's own network. Instead, attackers struck the third-party ticketing platform used to manage visit reservations, exposing personal data of customers who had booked tours. The same provider compromise also affected the neighbouring champagne house Veuve Clicquot, pointing to a shared-supplier (supply-chain) incident across the Champagne sector.

The exposed data covered visitors who had made reservations, and included:

• First and last names
• Dates of birth
• Email addresses and phone numbers
• Reservation details (visit type, date, amount)
• Administrative information such as titles

Vranken-Pommery stated that banking and payment data were not affected, as those were handled by a separate provider. The company notified impacted customers by email in both French and English, warning that some exposed data could be used for fraudulent purposes (e.g. phishing). Containment measures reported included isolating the affected systems, hardening access, and rebuilding the environment.