Ransomware Attack on Vivaticket Disrupts Louvre and Major European Museums

A ransomware attack claimed by RansomHouse against Vivaticket (via its Irec SAS subsidiary) on March 2 disrupted online reservations for about 3,500 European museums and monuments—including the Louvre and the Eiffel Tower—and the attackers claim to have stolen identity-rich reservation and account data (names, emails, purchase history, reservation details); Vivaticket reports no evidence of card data access. The report highlights broad operational impact across customers of a shared third‑party provider and recommends third‑party concentration review, precise scoping of exposed reservation data, and coordinated incident response and customer notification.