Gîtes de France Breach: 117,574 Accounts Added to Have I Been Pwned
The breach dates to May 16, 2026 and was added to Have I Been Pwned on October 18, 2026. Exposed data includes booking details, email addresses, names.

Key points
- 117,574 Gîtes de France accounts exposed.
- Breach dated May 16, 2026.
- Exposed: Booking details, Email addresses, Names.
A data breach affecting Gîtes de France has exposed 117,574 accounts, according to the breach-notification service Have I Been Pwned, which added the incident to its database on October 18, 2026.
At a glance
- Organisation
- Gîtes de France
- Accounts affected
- 117,574
- Breach date
- May 16, 2026
- Added to HIBP
- October 18, 2026
- Verified
- Yes
- Data exposed
- Booking details, Email addresses, Names, Phone numbers, Physical addresses
What happened?
Have I Been Pwned describes the incident as follows: In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numbers, postal addresses and booking details.
What data was exposed?
- Booking details
- Email addresses
- Names
- Phone numbers
- Physical addresses
Have I Been Pwned lists this breach as verified.
What should you do?
- Check whether your email address is in the breach at haveibeenpwned.com.
- Change your Gîtes de France password, and any other account where you reused it.
- Turn on two-factor authentication wherever it is offered.
- Be alert for phishing emails that use the exposed details to look convincing.
Frequently asked questions
How many accounts were affected in the Gîtes de France breach?
117,574 accounts, according to Have I Been Pwned.
What data was exposed in the Gîtes de France breach?
Booking details, Email addresses, Names, Phone numbers, Physical addresses.
How do I check if I was affected by the Gîtes de France breach?
Search for your email address at haveibeenpwned.com, then change the password and enable two-factor authentication.


