Nol Universe disclosed a personal-data breach through a vulnerability in the legacy Interpark Tour domestic-accommodation booking lookup. It concerns customers who used that service from February 15 through September 8, 2026, including names, contact details, booked products and stay dates. Flight, overseas-stay, tour and ticket bookings, as well as NOL service bookings, were excluded. The company blocked the attack route but did not disclose the number affected. Even someone who knows a reservation’s details should not be trusted without independently verifying requests for personal information through official channels.