Liseberg and Skansen have warned visitors in Sweden about possible leaks of personal data through their booking systems, after alerts issued on 27 October. Skansen says around 4,800 people are affected, while Liseberg has not specified how many customers may be involved.
The warnings concern Liseberg, the amusement park in Gothenburg, and Skansen, the open-air museum in Stockholm. Both say payment and card details are excluded, but have urged visitors to watch for fraudulent messages linked to their bookings.
Skansen data breach affects October bookings
Skansen says it was informed on 27 October that its ticket supplier, Visit, had suffered a data breach. Its official notice says the affected guests are mainly those who made bookings between 23 and 26 October. All affected guests were contacted by email on the evening of 27 October.
According to SVT’s report, the information accessed included names, postal addresses, telephone numbers, email addresses and details of ticket purchases. The broadcaster reported the figure of 4,800 people and said Skansen planned to report the incident to police.
In an update dated 28 October, Skansen said the supplier had indicated that neither personal identity numbers nor payment card details were affected. Skansen also says Visit has fixed the security flaw and that an investigation is continuing.
Liseberg warns of messages asking for payment
Liseberg’s security notice, updated on 27 October, describes a possible leak in its supplier’s booking system. It says there is currently no information indicating that the data has been used for fraud.
The park nevertheless warns about emails, text messages and other communications asking recipients to follow links, provide personal information or make payments. Skansen has issued a similar warning, including about messages referring to bookings, tickets or refunds.
Göteborgs-Posten reported that Liseberg also uses Visit, according to SVT. However, SVT said it remained unclear whether the incidents were connected.
