The new Join Up! mobile app is now available — download it from the App Store or Google Play

Join Up!™ Comments on Recent Cyber Incident

What Happened

Recently, Join Up!™ IT Team has detected a suspicious activity in our information systems. On 13 July 2026, we confirmed the incident and immediately launched an investigation to contain it and determine whether any unauthorised individuals had accessed personal data belonging to our users.

At this stage, all services remain operational. Join Up!™ continues to operate as usual across all markets.

First Step — Data Security

Our first priority was to secure customer data. We carried out a detailed security scan of our systems to detect hidden threats, close vulnerabilities, and ensure safety. As part of the ongoing investigation, we are currently assessing the impact of the cyber incident on personal information.

Based on our preliminary assessment, some Join Up!™ markets may have been affected, and the exposed data may include names, dates of birth and personal contact details (email, phone number, and postal details or addresses of residence) of nearly 1,000 clients.

What's Next

Join Up! has reported the incident to the Estonian Data Protection Inspectorate and remains fully open to cooperating with the authorities to protect our customers.

We will also promptly inform confirmed affected individuals about the incident, our response actions, and necessary steps to protect their information once we fully complete the investigation.

We are working through this incident and are committed to strengthening the protection of personal data and the resilience of our digital ecosystem through a range of measures, including strengthening our monitoring and protection systems against external attacks and conducting additional unscheduled training for employees.

Furthermore, we plan to conduct an external independent technical audit soon to validate and enhance the integrity and security of our systems.

The Hospitality Sector is Under Targeted Attack

  • Travel cyber security threats tend to follow a predictable seasonal pattern, and European travel agencies routinely face cyber threats. Several large European travel agencies were targeted and became affected from cyber attacks in recent years.
  • Besides, in 2026, cybersecurity experts observe a record rise in phishing scams targeting travellers and report 122% increase in cyberattacks in the hospitality sector over the past three years.

Our customers who have concerns regarding safety of their personal data, can refer a relevant enquiry at gdprincident@joinup.ee.

Join Up!™ reminds clients to remain vigilant, as a precaution, for any unexpected emails, calls, or messages claiming to be from JOIN UP!. Always verify the sender's identity before sharing any personal information. Do not make payments via links received in emails, text messages, or messaging apps unless you have independently confirmed that the request is genuine.

We understand how important the security of personal information is to our customers, and we sincerely apologise for the concern and inconvenience this incident may cause.

Join Up!

team

Subscribe to our mailing list to receives daily updates direct to your inbox
* we hate spam as much as you do