Overview
- Since June the hacker group Mydocs illegally accessed booking systems at luxury hotels in Italy and one Mallorca resort to extract high-resolution scans of passports, ID cards and other guest documents.
- Affected properties include at least nine Italian luxury hotels in Venice, Trieste, Capri, Ischia and Milano Marittima, with approximately 38,000 stolen documents linked to Venice’s Ca’ dei Conti alone.
- The national digital agency Agid reports online prices between €800 and €10,000 per pixelated scan, while outlets such as heise.de claim lower unit costs and a higher total of up to 160,000 files.
- Authorities warn the stolen images can fuel identity fraud, document forgery and unauthorized account openings, and some victims report not receiving breach notifications from affected hotels.
- Italian police and Agid are probing legal and technical security gaps in hotel check-in scanners and booking platforms, and regulators may pursue data-protection inquiries over improper ID retention.