Get Away Today Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have booked travel through Get Away Today may now face questions about whether their personal details sit among files claimed by a ransomware group. On 29 January 2024 the company was listed on a leak site associated with the group known as akira, which stated it had taken databases containing client personal information and intended to release them. The number of people affected remains unknown, and public detail on the precise contents is limited, yet the claim alone raises practical concerns for anyone whose data the company may hold.

For ordinary customers the stakes are concrete: travel bookings routinely involve names, contact details, payment information and itinerary records. If those records have left the organisation’s control, the risk of misuse follows, even while the full scale of the incident stays unconfirmed.

Inside the incident

According to the available record, Get Away Today was listed by the akira ransomware group on 29 January 2024. The group’s own statement describes Get Away Today as an online travel booking service and asserts that “a few databases with personal information of their clients” had been taken, amounting to “thousand of lines,” with the material to be made available soon. The listing characterises the event as a ransomware attack in which internal files were allegedly exfiltrated. No independent confirmation of the intrusion method, the exact date of access, the volume of data, or the number of individuals involved has been publicly detailed. People affected are recorded simply as unknown. The claim that data will be released remains, at this stage, an assertion by the group rather than a verified publication.

Inside akira

Akira is a ransomware operation that has been active in public reporting since early 2023. Like many contemporary groups, it typically employs a double-extortion model: encrypting systems while also copying data and threatening to publish it if a ransom is not paid. The group maintains a dedicated leak site on which it posts victim names and, in some cases, sample files or full archives. Public analyses of prior incidents attribute to akira the use of common initial-access techniques such as compromised credentials or unpatched remote-access services, followed by lateral movement and data staging before encryption. The group has listed organisations across multiple sectors; each listing is presented by the operators as evidence of a successful attack, though independent verification varies by case. In the present matter the only specific claim about Get Away Today is the one appearing on that leak site; no further statements unique to this victim have been recorded in the available facts.

Who is Get Away Today?

Get Away Today operates as an online travel booking service, arranging holidays, hotel stays and related packages for customers. Companies in this sector routinely collect and store personal data needed to complete reservations: customer names, addresses, telephone numbers, email addresses, payment-card or billing details, passport or identification numbers for international travel, and itinerary information. Because the business model depends on holding accurate client records for months or years, a successful intrusion can place a large volume of personal information at risk. The consequence of a breach here is therefore not abstract; it touches the private details of people who simply wanted to book a trip.

The information in question

The facts state that internal files were exfiltrated in a ransomware attack and that the group claims to have taken databases containing personal information of clients, described as “thousand of lines.” Exact data types beyond that description have not been disclosed in the public record. Organisations of this kind typically retain the categories noted above—contact data, payment details and travel documents—but whether any particular field was present in the claimed databases remains unconfirmed. Readers should treat the group’s description as an unverified claim rather than established inventory.

Why it matters

For individuals, the practical risks include phishing or social-engineering attempts that reference real booking details, fraudulent use of payment information, and identity-related fraud if government-document numbers were present. Even partial records can be combined with other leaked data to increase credibility of scams. For the organisation the consequences include regulatory scrutiny, potential notification obligations, reputational damage and the operational cost of investigation and remediation. Because the number of people affected is unknown and the precise contents unconfirmed, the full extent of harm cannot yet be measured; the uncertainty itself is part of the problem for those who may be involved.

Were you affected?

If you have used Get Away Today’s services, treat the possibility of exposure seriously while recognising that public detail remains limited. Practical first steps include:

• Monitor bank and credit-card statements for unfamiliar charges and consider requesting a new card if payment details were ever stored with the company.
• Be alert to unsolicited emails or calls that reference specific trips or personal details; verify any such contact through official channels rather than links or numbers supplied in the message.
• Change passwords associated with the booking account and enable multi-factor authentication wherever available.
• Review credit reports for unexpected accounts or inquiries.
• Run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets.

Further official notifications, if any, would come from the company itself or from relevant regulators. Until more verified information appears, caution and routine account hygiene remain the most useful responses.

AICompiled with AI assistance from public sources and published under our editorial standards.