Cybersecurity incident — 2023-02-28 00:00:00
Affected organization: Thermea Spa
Affected country: Canada
Industry: Accommodation and Food Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Undetermined
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Customers who purchased gift certificates from Thermea spa between early November and late February are told in an email that their credit card information may have been compromised, alongside their full names, phone numbers and email and street addresses.