Terravision terravision.eu Terravision data breach: what happened and what to do
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
In February 2023, the European airport transfer service Terravision suffered a breach that exposed over 2 million customer records. They held names, email addresses, phone numbers and salted password hashes, and sometimes dates of birth and country.
View all 13,118 breaches- Breach date
- Feb 2023
- Affected
- 2,075,625
- Data exposed
- Dates of birth, Email addresses, Geographic locations, Names, Passwords, Phone numbers
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
Terravision sells airport transfer tickets across Europe. In February 2023 it suffered a data breach. Have I Been Pwned added it in April 2023 and counts over 2M customer records. It also says Terravision did not respond to repeated attempts by individuals to report the incident over several months.
Sources checked: haveibeenpwned.com, consumer.ftc.gov, identitytheft.gov
Last verified against the official page:
What was exposed
The records included names, email addresses, phone numbers and salted password hashes. In some cases they also held a date of birth and country of origin. A salted hash is a scrambled form of a password, which is harder to crack than a plain one but not impossible if the password was weak.
What this lets criminals do
A travel booking is a good hook for phishing. Someone who knows your name, email and phone can send a message about a cancelled transfer, a refund or a changed pickup point and ask you to click. Leaked hashes can also be cracked offline, and if you reused the password elsewhere, the cracked version can be tried on other accounts.
What to do
Change your Terravision password and any reuse of it, and be wary of travel messages you didn't expect. If you booked a transfer recently, check the booking on the official site instead of a link.
What to do if you were in it
- 1
Change the password, and every place you reused it
Change it on this site first, then on any account that used the same or a similar password. A password manager makes unique passwords easy. Start with your email account, because password resets for other accounts usually go there.
- 2
Turn on two-factor login
Use an authenticator app or passkey where the site offers one. It stops most account takeovers even when a password is already out there.
- 3
Expect phishing that mentions the breach
Scammers use leaked details like your name, phone number or past bookings to sound convincing, and the FTC warns that they may pretend to be the breached company. Don't click links in messages about it. Contact the company through a phone number or website you already know. The FTC's breach guidance explains what to look for.
- 4
Check travel messages on the official site
If a message says your transfer changed or a refund is due, log in to the company's own site or call a number you trust. Don't use the contact details in the message.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. It checks breach databases for your email, phone and other details, and Serus keeps monitoring and alerts you when they show up in a new leak. It can't remove data from a breach, so the other steps still matter.
Frequently asked
Was I affected by the Terravision breach?
Search your email on Have I Been Pwned, which holds this breach. If you booked with Terravision around early 2023 or before, check.
What was exposed?
Names, email addresses, phone numbers and salted password hashes, and in some cases dates of birth and country of origin.
Should I change my password?
Yes, and change it anywhere else you used the same one. Salted hashes are harder to crack but not safe if the password was weak.
Did Terravision respond?
Have I Been Pwned says Terravision did not respond to multiple attempts to report the incident over a period of months.
Sources
- Have I Been Pwned: Terravision
- Have I Been Pwned: Terravision Data Breach · haveibeenpwned.com
- consumer.ftc.gov/consumer-alerts/2022/10/have-you-been-affected-data-breach-read
- IdentityTheft.gov · identitytheft.gov
Something wrong or out of date? Tell us and we'll re-check it.
