What happened
On 14 August 2025, our hotel was informed — following a technical alert — that certain scanned copies of customers’ identity documents (passports) had been published and offered for sale on a forum hosted on the so-called “dark web”. The images originated from our document management system , which was subject to unauthorised access by third parties and it was not been violated:a Malware on the web created this incident. The breach involved approximately 3,600 documents, acquired in the period between July 2023 and August 2025. The image copies include both the front and back of the document, containing identifying data such as name, surname, date and place of birth, nationality, document number, and photograph.

What this means under the law
Under the General Data Protection Regulation (GDPR – EU Reg. 2016/679), this incident qualifies as a personal data breach, meaning an event leading to the unauthorised disclosure of information relating to individuals.
Article 34 of the GDPR requires data controllers to inform affected individuals promptly whenever a breach is likely to result in a high risk to the rights and freedoms of natural persons.

Possible risks for customers
• EN: Identity theft, financial fraud, unlawful use of data to obtain services or forged documents, targeted phishing attacks.

Measures taken by the Hotel
1. Notification of the incident to the Data Protection Authority.
2. In-depth technical investigation with the service provider.
3. Strengthening security measures (multi-factor authentication, network segmentation, password change).
4. Communication to interested parties with self-protection instructions via this web page on the Hotel website.

What you can do
• Monitor bank accounts and payment instruments.
• Report any suspicious use of your data to the authorities.
• Be cautious of unsolicited emails or phone calls.
• Consider replacing the compromised identity document.
• Use credit monitoring or identity theft alert services.

FAQ
1. Is my passport definitely affected?
We cannot confirm each case individually here. Contact us directly and we will reply as soon as possible.

2. Is it safe to keep staying at the hotel?
Yes. Security systems are even stronger and document management now takes place with strengthened security measures.

3. What should I do right now?
Follow the self-protection measures above and keep copies of any reports made to the authorities.

Contact for assistance,
Email: fom@borghesecontemporaryhotel.com