Dear Travala Member,

We recently identified and contained unauthorised external access to certain customer records. We are writing to inform you that basic, text-based profile information linked to your account was included.

Your funds are safe, individual accounts are uncompromised, and platform operations—including our Concierge environment—remain entirely unaffected. We have fully secured our systems, strengthened our infrastructure, and taken all required regulatory steps following this incident.

What Was Impacted

The affected details linked to your account were limited to text-based profile data:

• Profile & Contact Info: Email address, and where provided: phone number, name, date of birth, and nationality.
• Security & Sign-In Details: Cryptographically hashed password (no plaintext passwords were exposed).

What Was NOT Impacted

Thanks to core platform defenses, the following were completely unaffected:

• Account Funds & Private Keys: Your funds, private keys, and wallet seed phrases are 100% safe and were never at risk.
• Concierge Accounts: All information related to our Concierge clients remains completely confidential and unaffected.
• Account Credentials & 2FA Access: All passwords remain securely encrypted, and active 2FA methods (including Google Authenticator and phone verification) remain unaffected.

How to Stay Safe

• Review Security Settings: Consider refreshing your 2FA and reviewing linked sign-in accounts.
• Be Alert to Phishing: Travala will never ask for your passwords or private keys. Be cautious of unsolicited communications using personal details to establish trust.

Contact Us

We sincerely apologise for this occurrence and remain committed to protecting your data. If you have questions, please contact our Data Protection Officer at dpo@travala.com.

Sincerely,
The Travala Team