November 5, 2026

Important Security Notice

The wave of cyberattacks in the tourism industry has already affected several well-known technology providers. Unfortunately, we have now discovered that an unauthorized access incident has occurred.

The unauthorized access was detected on November 5. The systems were secured immediately.

Here you will find the latest information regarding this incident.

What happened?

We have detected a cyberattack that resulted in unauthorized access to a managed server cluster belonging to our hosting provider.

The incident was identified on November 5, and the attack vector was closed. The systems were immediately secured, and additional protection and monitoring measures were activated. We are already in contact with our data protection officer and our cybersecurity experts.

Immediately after the incident came to light, an external IT security service provider was commissioned to analyze and investigate the matter. Forensic investigations are currently underway.
Customers potentially affected by the incident were notified immediately. The incident was also reported to the relevant data protection authority within the required timeframe, and a criminal complaint was filed.

This incident is not related to the “php2shell” issue that has been in the news in recent weeks. The company’s other systems are not affected. Our services remain available; business operations continue without interruption.

Transparency and security are our top priorities.

We are keeping the affected system users informed of the latest developments on an ongoing basis.

Information for Our System Users

Is my company affected?

The attack was specifically targeted at certain systems, but we cannot rule out the possibility that your system has been affected. If you suspect your system has been compromised, please contact privacy@incert.at directly.

Can I continue using my coupon system?

At this time, there is no evidence of misuse. Nevertheless, we ask our customers to remain vigilant and to report any suspicious activity immediately.

Are my login passwords for the incert system affected?

No, login credentials are not affected. Nevertheless, as a precaution, we recommend that customers change relevant passwords immediately.

Is any credit card or payment information affected?

No. Credit card information is definitely not affected by this incident, as we neither process nor store it.

Is this incident related to the well-known PHP2shell issue from October?

No, there is no connection.

Report Suspicious Cases

There is currently no evidence that the purchaser data for the gift certificates/tickets is being used for malicious purposes, such as fraud attempts, unusual contact attempts, or phishing activities. In particular, misuse of travel booking information is not expected, as no booking data is processed.

Nevertheless, we ask customers to exercise increased caution if, after purchasing a gift certificate or ticket, they receive unusual contact attempts (e.g., via unknown email addresses, WhatsApp messages—especially from abroad—or by phone) and are asked to take unusual actions, such as entering confidential information or making payments.

If customers contact you with specific information, please forward any suspicious cases to privacy@incert.at.