Jektis Travel: invoices, payment logs and reservation system data leaked

<p>On 05 July 2025, mecrobyte published to have leaked data belonging to <strong>Jektis Travel (Tunisia)</strong>, Tunisia on a hacking forum. The claimed data includes invoices, payment logs, reservation data. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>Hello DarkForums Community Im Back Again , Today I will Share With You A Breach From " Jektis Travel Tunisian Agence" This Data Include Factures And Payment Logs and Reservation Systeme , but i will share an admin account and i will share sample Facture Data 🕳️ Target: Code: www.jektistravel.com – Tunisian travel platform. 🧠 Access Point: Espace B2B – Partner login portal. 🎯 Leaked Credentials: Code: link : Agence de voyages en Tunisie - JEKTIS TRAVEL Code: Username: ptt2021 Password: PTT2021* Telegram user : @M3crobyte Telegram Channel : https://t.me/mecrobyte DATA SAMPLE HERE : https://gofil</p> <h2>Risks</h2> <ul> <li>Financial fraud using compromised payment records, bank details, or transaction histories</li> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that Jektis Travel (Tunisia)'s data has been compromised and is circulating on underground forums. Organisations in the travel sector should treat this incident as a reminder to audit access controls, monitor for anomalous data exfiltration, and ensure incident response plans address data publication scenarios. Affected individuals should change passwords and remain vigilant against phishing attempts.</p>